Malicious code in @gitlab-lsp/pkg-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df0575a200975029552912084573cf0331e1cf02ccad8e8fd7e024536143ef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48963 Malicious code in @gitlab-lsp/pkg-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf13c79e9bdc06f50391fa8a073bbe923119de6f064d8bc0a7333b6f98c87d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36787

Malicious code in @gitlab-lsp/workflow-api npm...

Malicious code in @gitlab-lsp/pkg-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf13c79e9bdc06f50391fa8a073bbe923119de6f064d8bc0a7333b6f98c87d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-lsp/workflow-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c05dd20ff8e2d3c07051d2f1146ac86522b9a72a6964e27122c9dd02d4c7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @gitlab-lsp/pkg-2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36788

Malicious code in @gitlab-lsp/pkg-2 npm...

EUVD-2025-36795

Malicious code in @gitlab-test/npm-v10 npm...

Malicious Package

Overview @gitlab-test/npm-v10 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @gitlab-test/bun-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac471c58a2d40a399987d96cf13593df041d1f3baa4d4e19e047d1090a931f6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-test/pnpm-v9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 352b39cbb73b3231bb6a6698230853fb58dd0313c7187e98a39dba4502226b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @gitlab-test/pnpm-v9 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @gitlab-test/yarn-v4 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2025-36793

Malicious code in @gitlab-test/yarn-v4 npm...

MAL-2025-48968 Malicious code in @gitlab-test/yarn-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f274342e8c6f4a200134b68b571eb1eb5d9f01c5d28f5d445b0da3fff6808ff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36796

Malicious code in @gitlab-test/bun-v1 npm...

Malicious code in @gitlab-test/yarn-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f274342e8c6f4a200134b68b571eb1eb5d9f01c5d28f5d445b0da3fff6808ff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-test/npm-v10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2cc1d206acfbb6ecfb92153bc522f6649d002c96ca2cb99d3dd7367520f64a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-36794

Malicious code in @gitlab-test/pnpm-v9 npm...

MAL-2025-48967 Malicious code in @gitlab-test/pnpm-v9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 352b39cbb73b3231bb6a6698230853fb58dd0313c7187e98a39dba4502226b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...