MAL-2025-47091 Malicious code in tripactions (npm)

The package tripactions was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd811dd81c5402b7511b48c5c95b3f347a050a63cc7c5a0bb9e5cdc47bace8a6 Any computer that has this package installed or running should be considered fully...

Malicious code in vite-meta-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38fbb013e3df2485e72ad722dfab14b0295214d9f631913350b0eec0d658469a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in affirmv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37426adb6b2eb639d44506bcc9b739c4ffb2c7b93c57139aa1757972f6cff5a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neondatabase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73494ce92c6c9b63069dc80526292563ec3c1b787487708dd8a2fb0fe8c6a240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-company-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6546fa1cf98f708a73bf9fbfdaeeef7667dc18db200c8b221c4e61a1507d02a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sensort/mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfb2a761e35021c8cfca9951c826bdeb679e0667dae74308df6d84a5f3c10bbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bbc-grandstand (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f0de83cd752dd58c1c6dae7ef140c2e9e41f3eb4a7467376e80659b3019cb75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @shein-components-test-ump/text-to-speech-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a51a7cd403f53cbbc65d804830060941af889d9ec0f60acd449b59f89a081e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in model-viewer-render-fidelity-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1109626e5ba207b2f14c0b5c9081c8b4dd49932d296464a13921731b5749a51c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in truelayer-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29c75990176d19762517dd4d6e52e6c8b1f434a2089b4bfc95fca56e7cd0a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parcel-plugin-lighterhtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 415194ea6ab6f715cf5f3ce8ee4f2b08597339fa35641457a333aed6ff9109a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in l12n85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81b201b28ebe2e33763c37749bdc78e23b025432cd0af81cbf20993a40cd2b5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grand_xss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce59c91d382e007649de4140fb5dd97f67594f864a0ca288c188c27d5bdf5dad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bankrate-iconography1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acb7b8b92b6bd6e05b8e824ac61d60136b54ebf070007817d2dd73219ff2d8c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/illum-perferendis-consectetur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26c3bf9aa992411b0245993a478b6e6618a7ceb089afc8b5a9abbc82eb88e72d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myonlife (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf83c22849afc0e8140c52c352eef3ba6bb5922258f9f0af70839ebfce66abaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4000 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b736ef174810287b355eecb99ea898a09f4eded4136ee7a8fd6293500f66557a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4205 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b9d4929b1bb747b9d7d8ecf7329b64608b02a585851b02f1bcc6cbbceeae900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-3304 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae10314d3cd8ac3e8d01fd77f355ba950dacea74baacbf2a40a70c743b80cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vpc-nat-gateway-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9417e9eb52b089fd432e5dd38464df3ef02177d6b0d26f9fc664ef56591c4ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...