MAL-2025-5301 Malicious code in commonjs-quirks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcec4e4bf134e8db1b8066d669598fcc2abee6878c561780ea292d0ee6e9d0db Any computer that has this package installed or running should be considered...

MAL-2025-5076 Malicious code in content20200508 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4797 Malicious code in @loybung/emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b93520f6920db8156f89701cab5337d1aeb0421b6e8d4a598896dd12b78aad06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4636 Malicious code in @balajih4kr/postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29b83a8b5260357625ba9fad6ee0649e25c265bd0127fe1a27f9130777766e6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4488 Malicious code in m03124geeztd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b68dbf52968379b3612817a4951913aecc568c526510b1e8f52a5dacf51301d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4198 Malicious code in t43est-hello-user-test-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4189 Malicious code in porrtal-workspace (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4181 Malicious code in hello-user-test-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4174 Malicious code in genesys-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4150 Malicious code in @dailyapy-rn/rn-push-provisioning (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4145 Malicious code in @bmwfedev/playwright-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3879 Malicious code in convera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56afe2801be07df7d5829b5645331e9da9e3b531e3bdc930c293a153272cf864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3572 Malicious code in component-modernizr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d129d7d7e1054353b2ec57d812f644c8d4fbcbc5ad054685eff845776516d1ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3341 Malicious code in @sporta-technology/d11-web-components.progress-circle (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3320 Malicious code in @sporta-technology/d11-web-components.date-picker.date-time-picker (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3300 Malicious code in @flutterfire/source-versions (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2885 Malicious code in loggercompanyab57ty (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2824 Malicious code in @uniqa/self-registration-spec-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1699 Malicious code in @smt-front/poster (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1329 Malicious code in htx-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c05dd9781405f8a19064535fdb213fba19de58f671ed5bc64d2cf1ed95e6d7 Any computer that has this package install...