MAL-2025-2074 Malicious code in adminauthserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f01fbeb3da8a3ec0a1c93f3ff5431e6be6693f2a2e13482834637f2b73e99d13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2073 Malicious code in symphony-data-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3c641dfba68a53ede962e733dcc7d2fb8171eec7c4b192417a0f50066eeca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2072 Malicious code in ddataflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e3628188472d3921b31929497ffb10a64fe2632cd81d96c68d5eafa7b7cf18d The OpenSSF Package Analysis project identified 'ddataflow' @ 3.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2071 Malicious code in connector123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4261abe09f2e4b03b147c1ead2f47890e02c3a6566f7b8d5feec8ead8c00737a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2070 Malicious code in connector-colaborator1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a80cb3d91a164687c80e6c2353408b9a523ab14d72481ceda8aeb7e875b339c The OpenSSF Package Analysis project identified 'connector-colaborator1' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-2068 Malicious code in unms-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9afdcd693808bda70843549fdd063575a29fdfeb78fd1baabc86e74b3cfb868d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in product-custom-grid-columns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 620dece457b625966cbf804fa1e8bcd8b54fb2b961020453940961af4569f10d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2066 Malicious code in aem-maven-archetype (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccc92d5c4e3257cf07baae14d4ebf9e7b16276a8433cfff70bc323d41aad2f4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2063 Malicious code in safe-client-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257bc819b8f443ea195e14777e23a3e5142765db2b4301d397fd894217a6c2a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2062 Malicious code in learning-kotlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5560da3fe5e63bf7da20ae1cd458fd7999e279367f07227ce8a6019ca497dc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2061 Malicious code in atpw-reactive-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 087c073ee5ea5ea80f9935623ee80f8efd14ca034a3f7816298c966e5ff939cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2059 Malicious code in subnplanmgmtserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41808cc4bbfb04af471b477a6c3bd56c1b9d5eba6fcc1572d6fda3ba46617d8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2060 Malicious code in subscriptionmgmtserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c14d2b0dcadceb26623b66d1383bf38d46b5b9cccee3619f1cfe8cef942f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2058 Malicious code in buttonfactoryserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 158238f70853c391431a3c0e3b53d79d44970a0d956562c88324b2c1da5e08e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2020 Malicious code in vdkweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7836de93244912bbac99f38fc331aca106065b40e6eb6ba70cb26eff02acd2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2019 Malicious code in vladmandic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb2cb3d220e99dac04192f31ba95c5c0141c0f5dd2860be4091c7c57e17083fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2016 Malicious code in adyenaddon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4954f0f5ce68df460bab2cdeec79f35ea8d3aa5eac320bf43ed08d72b1495d0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2018 Malicious code in calculated_members_message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5529e99d26fab951551b850892343db8270230c71da1a8091e2bca79559e37f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2015 Malicious code in timify-packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 440654aa8c74a2e41a533db2f19a6979cd5863485d40295a5d007fec08638c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1680 Malicious code in ownyourcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae49ecc59ae81e10af1589cca5d026e0fb03269a4490c4934d61934a157d7b86 The OpenSSF Package Analysis project identified 'ownyourcode' @ 12.1.1 npm as malicious. It is considered malicious because: - The package...