MAL-2025-699 Malicious code in web-actions-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d40edcae4c894042717491d36e69b45f4b012916fc7b7dbd64e5901b3b6dda8 Any computer that has this package installed or running should be considered...

MAL-2025-688 Malicious code in test_package_file (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53b443550dc59ee48bf343b26a7e563407dc65e43fc2fd49c177854a1ecb70eb Any computer that has this package installed or running should be considered...

MAL-2025-663 Malicious code in gcp-scanner-visualizer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-639 Malicious code in calling-integration-sdk-demo-react-ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-652 Malicious code in emergency-pull-request-probot-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-672 Malicious code in media_kit_native_event_loop (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d4f7b68836068f9cc96c2c5db66c0ad1cbc255e21f525e5069885d7aff5e5f Any computer that has this package installed or running should be considered...

MAL-2025-644 Malicious code in cognito_authorizer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-691 Malicious code in theme-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-641 Malicious code in check-release-dependencies (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bdeafded5c255c77e197893504e55d7f76cbc76632b83f3b04925c6c6aa970 Any computer that has this package installed or running should be considered...

MAL-2025-653 Malicious code in eslint-v9 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46f607d02591ccf25f4bd27e192a7f99206ed9e37dba6c62189bf0945f600a6 Any computer that has this package installed or running should be considered...

MAL-2025-671 Malicious code in lightbeam-we (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ad7b64aec88d3c8b93f244159ff01cbfdaf1a014aa9439598c978a25c848bf8 Any computer that has this package installed or running should be considered...

MAL-2025-689 Malicious code in teswewewewted (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-637 Malicious code in backpack-foundations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4bba8fcd3cb3b4c99abd7a1cff3ddb0e0c15a179005fbed75b0441572a2dad1 Any computer that has this package installed or running should be considered...

MAL-2025-695 Malicious code in types-safety-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f87d9fc827765eae4762461f11be747b286e523eca4f28f45a62ab4ff11d3c9 Any computer that has this package installed or running should be considered...

MAL-2025-631 Malicious code in @zohaib2121/dtapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27f5d74d5d130aff4fd7d231b3d9cd57faedebb2a8cc7f462d33e36d00764d50 Any computer that has this package installed or running should be considered...

MAL-2025-656 Malicious code in fabric-shim-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-643 Malicious code in codeql-query (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-622 Malicious code in tree-sitter-hcl (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895fc4f8ca15729033448c2a72536b4599d5bfb9fa83bf42bec01c2e4e4fae88 Any computer that has this package installed or running should be considered...

MAL-2025-602 Malicious code in openbet-access-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd796ac609bd9ccd763f039c5ecfd7fd63b7c76170f3feaba70a4d2148fa881 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-596 Malicious code in home-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 243807d7ae6247f1bee104dab17a677c3ec10064973a5ac7b3e5f4ff2753d35a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...