MAL-2025-1655 Malicious code in secureshield4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f23bae727a469f26985689c3f9d59601b7bfd53e52b3cf2b271a56941e37af5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1653 Malicious code in azure-sdk-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 479067c01646643f73d6f81188d5b155d76d985758485a7b0c6fe92326db09d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1651 Malicious code in local_editor_top (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76950599e5b37eafb90ddff61774b4fc890522176ea70d8e9b18b99b7545f9ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1650 Malicious code in iff-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a57d0a13eebe99cec9bd319389850e2b8f5536100fa634811d521a13bd3b6c16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1649 Malicious code in react-component-usage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02edaef58fe9d6ea792eb3739c512482637fea90b44a07700f89233420a331f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1648 Malicious code in onyx-ssi-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46a5cdb0edf65e0650f15c2a00e379442b620823ea1ed315afb6946edc3a4268 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1646 Malicious code in battleships-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f55e61730d5debfe618f877b3d6dc9b51670a3d2a036da104e18c94f35041b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1644 Malicious code in ark-boostrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03a498b564f81996bedc4aae91489b170bd4479c5e696b00a8e467ecc39f02c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1564 Malicious code in synapse-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f22e2f65543683192030203ce08eecf0c137c3bc94f711cf9dd5c143dd1bd19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ufarm-evm-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac3c2b22abdad36913f270ded803406db0e6492f6747ca9177aeca19cd36aab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1557 Malicious code in @c11-lib-ts/document-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf45faf4cf8ea3609807fa01163bcf09cd1e633ed2744a8593f0efe85a8f0b24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1526 Malicious code in realtime-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30a419d00d6726fcd2d97dfde72e8d41922e2fe0a0179c77beae95f697990241 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1521 Malicious code in twilio-realtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b685743691677bab2a820511e27dea13c5ce9441dbd97ca3a24dca0cb92a8a8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in erc20-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1318f067a3c4a722bc3d70af3c94d47696dc695c07dafc5cac772db0e1b20fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1522 Malicious code in @maheshtestorg/maheshtestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eacc15d981c527f9ae0a2007c6a379418fa4fd05d4fe903b0216e19aaed08634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in miniprogram-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ae3d0d0a1a6baf3618206ae9d0a31f403340e2a4bbf9aa7d4e9980eb1d817 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1518 Malicious code in miniprogram-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ae3d0d0a1a6baf3618206ae9d0a31f403340e2a4bbf9aa7d4e9980eb1d817 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1515 Malicious code in @starkgate-v2/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd18cb51b9bfc804c264ad648ce51fda4711022cb95ee99b35e70739222662ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1513 Malicious code in champion-trader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a12ee286d5987c604b6598557a7a9d8ed03564366dccc6227f87d58a9ac5c171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1511 Malicious code in spacelift-webhook-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bb9dc87c1669be92bee0be50a372fb87d1d92064bc4db257131d4323c2783e9 The OpenSSF Package Analysis project identified 'spacelift-webhook-receiver' @ 1.1.0 npm as malicious. It is considered malicious because: - The...