MAL-2025-47336 Malicious code in oradm-to-gql (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0ac4253913c37f56a9ee729dd49820eda47882515ce23f981c61b39f249ecf4 Any computer that has this package installed or running should be considered fully compromised. All...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in gql-generated (npm)

The package gql-generated was found to contain malicious code...

Malicious code in sl-em7-gql (npm)

The package sl-em7-gql was found to contain malicious code...

MAL-2025-33400 Malicious code in sl-em7-gql (npm)

The package sl-em7-gql was found to contain malicious code...

Malicious code in agoda.cronos.gql (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0918c4b7cc7549b33d32ef492ce8439108e4df06cece719c5a0e497e048f6293 Any computer that has this package installed or running should be considered...

Malware in gql-test-client

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

MAL-2025-3717 Malicious code in gql-test-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc1a4e0775ef3923d488773c12cfaaa56a985b4f914af402f9598ea0d564b883 Any computer that has this package installed or running should be considered...

Malicious code in gql-tag-operations (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9646 Malicious code in gql-tag-operations (npm)

--- -= Per source details. Do not edit below this line.=-...

@enalmada/next-gql (>=0.0.4, <=0.1.3) potentially affected by CVE-2024-24556 via @urql/next (>=1.0.0, <=1.1.0)

@urql/next NPM version =1.0.0, =0.0.4, =0.1.3 Source cves: CVE-2024-24556 Source advisory: OSV:GHSA-QHJF-HM5J-335W...