MAL-2025-1505 Malicious code in storyblok-rich-text-astro-renderer-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca413e5e4f59154a8de4096af868e37c16b2b9df85e5e20a341283c83e7b1db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1472 Malicious code in @supera/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49646b06c192dbf0af2ad637e18b135b9b07b4d33bf270720fb46c6037d47f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1465 Malicious code in ing-open-banking-cli-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e671918afbc4f855be4bae3831f2a5b173f03949b1c9de394cf545a13027863e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1463 Malicious code in sysaid-infra-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32067df7060881cbe716c03dd7dc8c3b443263f314412e89e99a435622227b1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1458 Malicious code in evoplay-spinential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 715a8e278031d52f48cc59f78dfd93253ecc47b831d67be2854158f1e977f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1391 Malicious code in voiceedgelite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fd93b14a943a875efb1d2602d31cc497e92f135adac765f65f2a0ffd72d6ad42 The OpenSSF Package Analysis project identified 'voiceedgelite' @ 1.1.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in cros_infotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5adad9c6296b06931a0764f6cabfb3fc41199e49b1198f26284cbb0d134f5e17 The OpenSSF Package Analysis project identified 'crosinfotest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-725 Malicious code in victory-native-xl-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9101dd18b0880eb5358d74e5a997f3a532b49825b6a4cb47d96778143a48b4a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bindbc-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3969ce36d361753fe46f849a0dba26b4548e7c90bec80c86390c47bb429ec9bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-349 Malicious code in chkpkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2abd5e119e59d609551d6fcaf5128bad86491c26cc6b721014c324d54e930a7e The OpenSSF Package Analysis project identified 'chkpkit' @ 99.99.9-9.99 npm as malicious. It is considered malicious because: - The package...

MAL-2025-326 Malicious code in bigcommerce.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f610f94d4adf4f1e09e9727a8c6960c6b9c0bef8733be71242a3bfdad135f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-324 Malicious code in built-with-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f426ea9ad545f39f1e84cd26ee384b096d08c2b82f8b3554f97fc1ce85fac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-267 Malicious code in tr46mine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d941efa6b0b6b2ec8beb148535517722510f96ac8bb2f5fde58650fe7b542342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-266 Malicious code in extendmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e7e774dc448f84f9b89b418d844c730e99dcd9797f87977a008d2bbdf92ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jpl-branding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824ee6168e9d4e1ba52afc1563863a7b79255495e7975e54013eddac8de94875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-22 Malicious code in @vf-org/smapi-js-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb778953ccadf1ddd3d3249677a4b7c27133ddd85d451ebe6cf0e04611264b86 The OpenSSF Package Analysis project identified '@vf-org/smapi-js-core' @ 8.2.10 npm as malicious. It is considered malicious because: - The...

MAL-2025-19 Malicious code in nativescript-gainsight-px2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12143d1c19f403559d49925266742f6b2ca75a3fda8ed195a4e0189bf64dce70 The OpenSSF Package Analysis project identified 'nativescript-gainsight-px2' @ 1.11.3 npm as malicious. It is considered malicious because: - Th...

Malicious code in react-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3056b390e6fea55432a197cca0d614e66de98058a3e4b6087a547a66327ee6c5 The OpenSSF Package Analysis project identified 'react-release-manager' @ 1.1.3 npm as malicious. It is considered malicious because: - The...

MAL-2024-12069 Malicious code in squirreldisk-tauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b61244e5ef1dd2b28d94395ad515353e3bcf1c00f2629376c95305ca4323e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11925 Malicious code in com.unity.assetgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dee635c5dd8d8b009c47b1924e679ac0f95c83a41bbff41ff4d9978f75dae3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...