MAL-2025-2018 Malicious code in calculated_members_message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5529e99d26fab951551b850892343db8270230c71da1a8091e2bca79559e37f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2015 Malicious code in timify-packager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 440654aa8c74a2e41a533db2f19a6979cd5863485d40295a5d007fec08638c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1680 Malicious code in ownyourcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae49ecc59ae81e10af1589cca5d026e0fb03269a4490c4934d61934a157d7b86 The OpenSSF Package Analysis project identified 'ownyourcode' @ 12.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-1679 Malicious code in fullscreenify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d13d5a4c5d70ad749505a86402ab37e870dcbfcd8ea1c72ca6b754823852c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1677 Malicious code in pages14.0.0_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed3f8870b4796bd4fc8667ec8911ddba466acaed945970ce6cf2f67e2630a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1676 Malicious code in zohodeskportalsdksampleappsreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46d46cb1be5475917e2e2ec917b43cb05d3a0382d2fc6b288f7fc02089399be5 The OpenSSF Package Analysis project identified 'zohodeskportalsdksampleappsreactnative' @ 5.1.0 npm as malicious. It is considered malicious...

MAL-2025-1675 Malicious code in azure-boards-estimate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5462c61b481e30b0b6520e0b577f7617782f0e214162c66ab8adbe0c21dfbcb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1674 Malicious code in grafana-metricsdrilldown-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f0bf52430819b26f7b4042daedcdd27b0b6dcc7278385dac6989be16b987de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dep-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 880d5ea6c43eb50d284249180eca08fc64f4f7efa0a1e1abaaf234acfce4b6d6 The OpenSSF Package Analysis project identified 'dep-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2025-1671 Malicious code in mkdocs-material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e8872e6e833db36b43b1b63f9aa1324d6d0f193b0a0a1e352bf104215f00d4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mkdocs-material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e8872e6e833db36b43b1b63f9aa1324d6d0f193b0a0a1e352bf104215f00d4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1670 Malicious code in snap-design-system-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad4c0b89835a8fe7ca332902590a3ace5d2889d12e2d3cde10ee5dc5c695d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2064 Malicious code in bahamazing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f74a7acba34cff5cc3fc70e44b94822e3fbf03bed544068a6d96b4eb4f9b067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1668 Malicious code in rdocs-light (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d1b6fac6abdefe443e0bc5cf7425f5b8dd8b32080d8e429eb9c2031ca18b059 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1667 Malicious code in react-native-survicate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bc16cb68d62d1ff95179e3f34e2afa8a62648c8cf9a10e9de12a9d1ec4e4abe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1666 Malicious code in metrics-aggregator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cd896083dc19fbe781ed9f414bc1a72581378e63717086f459e1b03fd0c058c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1664 Malicious code in ad-creative-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4976ed17af1930b3c8e965b09664d5243a6cfe6bfa46e841964001beb48fb316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1665 Malicious code in ocular-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 948b2048674d1a1a44146f84c535c4078ce37a6108876e974d3db58b06f183f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1662 Malicious code in sip.js-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc79a8a90b9e2756012e6ea436db1bc15c17b4596bcedc556ce70cfd8800d99c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1661 Malicious code in ringcentral-web-phone-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5d0cdb47587dfa64b594d26d1b33dea3d9cb70b7f8a581fa66d1f005df4ee60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...