Malicious code in cschalk (npm)

This package exfiltrates API keys to an attacker-controlled server. It also has destructive functionality to delete development-related directories. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bc84195226616b9037825439862309922afde77ccd32cc2c6158025030d27b2 Any...

MAL-2025-608 Malicious code in achalk-next (npm)

This package exfiltrates API keys to an attacker-controlled server. It also has destructive functionality to delete development-related directories. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b543eb1092108748ab3abd00741f5f1d0b181f326ba147792f883aed8d837697 Any...

MAL-2025-303 Malicious code in sdk-coin-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39dc006518bfc9ed3a2846ae2e407993b19b826cb2c30c0a31bace1a1ee06f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-311 Malicious code in sdk-coin-btc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae32f6f4577bb9bc54269aa0b6e1c46e849d1a36823c0cdea862d5eea40b5c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-273 Malicious code in babel-plugin-i18n-calypso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5be90c4dbcb38fbd7461004561537640adcf0ee532efbe124872f5f11ebd82b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-287 Malicious code in composite-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0895cfef58bc04374e30ca74fe5937d86332f548841883b7903c9cd2053af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-277 Malicious code in calypso-babel-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b19b336747cffb6dcd17e2bdf7369eaeffb28fe85d0c8198710e89dbced26e94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-299 Malicious code in no3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322a77395d2488412e9dbb8c78327779c4912e90d1e0136e14fd924ceea5817c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-231 Malicious code in prem-video-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98f8700f52463b240e5e69dc9d6c5f8da58fcfb2f7ade307ba971814a2f6bbb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-214 Malicious code in opensea-developer-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 692ba66619407967d692be9c0e70b5b297806cf1e398766ee1556657af6feba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-238 Malicious code in selectkit1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d1e92cc92e640c0bf6819b70d715c79a4367d8a82101409a67189bc33c67ad4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-215 Malicious code in percy-cake-electron-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84391faa58dbd8fba6583b300874c0f4eeb13fef558586ce912dc3b8d9ba314a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in enum-bug-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5c7a3ad4ff0bbfe09e6cac40b10a7e6a0c15ffb81adb37274df55278e3b4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-206 Malicious code in matic-child-subgraphs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085980a7e031404b3267eff3f19584b087b5ce5329ce9fa17265b00ef3ea2f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-261 Malicious code in woocommerce-gateway-plisio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8f3b92cdf30ceeaf608dbfa89b7f445770f3e296b7f54fc5bec265e52ef5cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matic-child-subgraphs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 085980a7e031404b3267eff3f19584b087b5ce5329ce9fa17265b00ef3ea2f9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-184 Malicious code in enum-bug-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5c7a3ad4ff0bbfe09e6cac40b10a7e6a0c15ffb81adb37274df55278e3b4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-183 Malicious code in emoji-datasource-google-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3653a56d9d36fb380b98090ef118578ceed822d7bb1ab1a62d6a18fba5ed5b2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-158 Malicious code in anotherexternal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8048f8389fecd3d45d156d4fbd5dbbff5ece757ce08de730f4546368cad782b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-180 Malicious code in delegator-core-viem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abfbbf539b90caab925674f6beebb0623e42d576e687d703a9facfd25df6bbc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...