MAL-2025-2492 Malicious code in @theoretical123/ssh2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e71f899338d9878e98836fb491679782d7b1b04111554fc7230e7263049d3e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2471 Malicious code in probe.gl-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4562bdf912702598a8df806f64ea26ad5c353670348f014304ca02f45397ebec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2379 Malicious code in elementor-editor-github-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72f60b6d3f909084d15e59acc80082db35f713c520dc29ff74ec2a79ceb33dcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paymentread-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99ea0fd7ce8df578106ddafd97e7ce60c03a1b0c1481c5a1caa636edd634246b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2339 Malicious code in malwaretesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08fe9939d1c2c8ae0ac8bf48c1a2f4e5fc02623d8012c4c6bbbb308f4d6f4200 The OpenSSF Package Analysis project identified 'malwaretesting' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2338 Malicious code in malwaretest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 397437468f634806853b4f3a7f82626c63224cb1d7f173af2aa530d126540ea9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2318 Malicious code in language-ring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7e9ac770686a75d1d581c790e326d66e60e71b9caa83f387a527c3d5e2df88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2252 Malicious code in dir-size-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f803eeed1967e8ae2cd3095d6f293153fe8b5574bbef8aa2191c4b2f862658f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pixelary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed6e04cfdf17df0b3303f51acdf9e0e128361f17eef5fa028f6bd70d3436984c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-invoicer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce45f4356717c34ab095570b175a0fa8bb5c8b2929e42e73d1997dc8fdec3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2131 Malicious code in toloka-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c7326d0e79737f24ac6ba12b7f58459b7aa76c833af0bffc5791d2ef4f1a1ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2135 Malicious code in upbit-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96a25c34aed5620d21b577a47638dae53d329bee915d0b3ccc908d7625cf7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in safe-client-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257bc819b8f443ea195e14777e23a3e5142765db2b4301d397fd894217a6c2a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2028 Malicious code in @tim0310/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 622f4e3ebf1f361078beffb0b92380f7658703123c9f9e0f86a053e8cf6c4dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2022 Malicious code in @dealfront/df-dictionaries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005f6dc68da6691a10ef5aad4e7b77f4e8cdcbbe7aa892786754c834aba4f46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in doitoml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c92ab9b950fef1f567faa52993a2c800c38e041919a32cd64538a9aef8ecb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tablegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3570d8e35e0d101811baef90ca7f5697fcb57be4cf3d82558480a54fb37d99d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in huma-contracts-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffcd8e55c63708841725749619d1aa01ac52fa1345eab2c6dc53f3b9f2615581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

When using the project to bypass Deezer API restrictions, project exfiltrates user data to a hardcoded server.

Published in 2019, the automslc package is a Python librarythat bypasses Deezer API restrictions to download music.The package was found to exfiltrate user data to a hardcoded server,which could be used for malicious purposes...

MAL-2025-2236 Malicious code in @supera/share (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c348a3e52ca7aa30cd6b9bd7234d6385f1305e8c0f04c400ff236df303f06628 Any computer that has this package install...