MAL-2025-99568 Malicious code in arif-kue99-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9959927cac651fd8c2b5136ddd00b5e278b7969f4d5839eb1e7e37f9cb7abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rxnt-kue (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ec749849185c3ae0212a13b39a44ff783ea47aa560116e7af14df511632585e Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47347 Malicious code in rxnt-kue (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ec749849185c3ae0212a13b39a44ff783ea47aa560116e7af14df511632585e Any computer that has this package installed or running should be considered fully compromised. All...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

MAL-2025-24800 Malicious code in kue-worker (npm)

The package kue-worker was found to contain malicious code...

MAL-2025-37024 Malicious code in tomi-kue3-kuki (npm)

The package tomi-kue3-kuki was found to contain malicious code...

Malicious code in kue-worker (npm)

The package kue-worker was found to contain malicious code...