MAL-2025-3269 Malicious code in vault-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c39e1eed1d8bf3442c38c8963d7e9aae31825a734eec63405aa146da7a02b57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3268 Malicious code in arubaiothubdemoapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 876ff25e0242422681fb71c6ba92f36b79e0584103fae49a5bffdd959497485b The OpenSSF Package Analysis project identified 'arubaiothubdemoapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

New Jersey Sues Discord for Allegedly Failing to Protect Children

The New Jersey attorney general claims Discord’s features to keep children under 13 safe from sexual predators and harmful content are inadequate...

Google Blocked 5.1B Harmful Ads and Suspended 39.2M Advertiser Accounts in 2024

Google on Wednesday revealed that it suspended over 39.2 million advertiser accounts in 2024, with a majority of them identified and blocked by its systems before it could serve harmful ads to users. In all, the tech giant said it stopped 5.1 billion bad ads, restricted 9.1 billion ads, and block...

MAL-2025-3174 Malicious code in typesense-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 490e72092d3e2b725ff92c6b8bb87fb850509bdd1abbead8e8cb9427a4d92bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3172 Malicious code in eslint-config-mytonwallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053fc557bc8d1830f63a74479e9c52bef75ef401075b73d0845fa6235837cdfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3171 Malicious code in mtw-capacitor-usb-hid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4323a3f80bc8e5ceadb75f1584e0dc478b1a9ed7980736609421a432bd35f50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3169 Malicious code in @hyattcorp/design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58f37a41edefebdd744efb01380e035aad567082e7fa96361effc44e4e9f1b49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3139 Malicious code in modeldb-vis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a96162bc850d1cdd271c5fba070bedf3477359301f09f9991c578413eefc136 The OpenSSF Package Analysis project identified 'modeldb-vis' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3138 Malicious code in angular2-tesla-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7134a794a37bf8aae8607bb577adf8e9b11e74f9d080a48a1a4f935fb06a8b7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3137 Malicious code in rlusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 629e6d48825f1e58a7575a37bc976ac9d955d1e6b0a8a3782539fd168ddc570e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3136 Malicious code in clarunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecdc65ad87798f6243b3d284367e755b52beb5eef68fcc0ca08b0b802230643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3507 Malicious code in amazonui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c91b2f8916dd3773cd2df6a060349b8291d8d10972f04e2d2fd9a00498b8273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3132 Malicious code in internal-utils-bronxi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2c2b247fbdf1610b485929f50b7e3394cf7f7d524a747b5941f0c64563f4407 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3131 Malicious code in dave-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5c5e4c9469fec2d35256dcb0afcf57d63e6cfcf6ef685cf0f916f05cedc34c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3130 Malicious code in @oldzeppelin/contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59936093e10e486bceef6e021a4ca771a2996cf612a809e2bea28243348f8968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3129 Malicious code in scrt-www (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c3dc483e4a4005db4d3a5ec2f2b2e8d63aa5b8258510f483ce9d4c7351b2c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3086 Malicious code in r5-zknet-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070dfd4d90ed4eb9d2cd623b84d76f1b2cf1fcfd6bb9704350773e5344446c94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3084 Malicious code in daos.fun (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6981bbd2419a973811f38b35a5dcf95ec496a17e132d0d95f86314cfb32cd914 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3031 Malicious code in one-venafi-local-store-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6368f9d9802e4cee726a0e6cb5adae6d8a31d8ce4cea0d6d515fcb9077d2f220 The OpenSSF Package Analysis project identified 'one-venafi-local-store-manager' @ 1.0.8 npm as malicious. It is considered malicious because: -...