MAL-2025-5471 Malicious code in uphold-sdk-javascript-extensions (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5434 Malicious code in math-utils-gava (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbfa97f4de0215f88db05e74ecb15d790ba8221495f33601d48f98303f3f93d4 Any computer that has this package installed or running should be considered...

MAL-2025-5414 Malicious code in hackshack-leaderboard (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4798 Malicious code in @loybung/encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45bb70dace7a418d2161aade822a8325a2f60579220f62b64c07c32c05b338fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4912 Malicious code in yux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32619602ea22f43c922bd51fb5af4f417fee447f162999a6e291f7f83a39e9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @klarna-travel-platform/travel-booking-shared-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f013426be635a2310d1320cacca5b4ce5067f6686d76993ed1ea4ef590315037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_historia_do_movimento_pentecostal_no_brasil_by_isael_de_araujo_k3o0z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b931a05ee3f5829b5d724725a78669b59ea684aa7dd4cf3c030dadad9dc48a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1446 Malicious code in weex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3463fb43413f5f55fea549cc0240a5b8e3726099081d9d9379f10c772591d870 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1406 Malicious code in coinw-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fa00c723741623254392df4efea8cb1992992ec41b9cbd448a7d3b478759cb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11935 Malicious code in @add-wallet-exchange/set-imported-csv-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85e68f887715288c07927e0e74544a85fd8c7f1fd0ea7afe1ff8d50322fcaa34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bingads-webui-react/with-site-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997e1cce193e872c031f1482119f4899f32d99a1ecc7dc194270a504607c421e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/numquam-itaque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60e579c813327d8135c8bd1d872c5a4b3365b45ba47e6a1e6d658939d9061b43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/pariatur-ad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d63da05fee628a513211a2d9871e5b4726d7ef0ac3e3b941db2f8ed8f401f1d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/nemo-atque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d9c1da21e7f18856e39379c221e5cc6b4d82f0d1ff647120db0b4e5a4396d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uploadcare-jotform-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2d37a0408ad8c603efcb131e322f0f2d2a142058620fa1b41f396e212590b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eact-transdtion-grouw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ddf2ee15692cb3ad61f1aa92a0a0cb6a68ea7eb707c9be262f96c1722f85945 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...