MAL-2025-6418 Malicious code in fooldependaairbf (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6411 Malicious code in dndattachmentt (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6404 Malicious code in boost-chii-new (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6381 Malicious code in web3-rtc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9dca49a40515fc43ab5bb3d987aa551a6464961dd1aee2b3e4cadae66831a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5076 Malicious code in content20200508 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4797 Malicious code in @loybung/emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93520f6920db8156f89701cab5337d1aeb0421b6e8d4a598896dd12b78aad06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4636 Malicious code in @balajih4kr/postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29b83a8b5260357625ba9fad6ee0649e25c265bd0127fe1a27f9130777766e6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4488 Malicious code in m03124geeztd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68dbf52968379b3612817a4951913aecc568c526510b1e8f52a5dacf51301d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4198 Malicious code in t43est-hello-user-test-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4150 Malicious code in @dailyapy-rn/rn-push-provisioning (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4145 Malicious code in @bmwfedev/playwright-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3879 Malicious code in convera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56afe2801be07df7d5829b5645331e9da9e3b531e3bdc930c293a153272cf864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3341 Malicious code in @sporta-technology/d11-web-components.progress-circle (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3320 Malicious code in @sporta-technology/d11-web-components.date-picker.date-time-picker (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3300 Malicious code in @flutterfire/source-versions (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2885 Malicious code in loggercompanyab57ty (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2824 Malicious code in @uniqa/self-registration-spec-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1699 Malicious code in @smt-front/poster (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1329 Malicious code in htx-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c05dd9781405f8a19064535fdb213fba19de58f671ed5bc64d2cf1ed95e6d7 Any computer that has this package install...

MAL-2025-469 Malicious code in godaddy-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af949cfb5a5349e6685c85de7c1f23beb51e56c772e2c6f19ec5f00e0a87e407 The OpenSSF Package Analysis project identified 'godaddy-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...