MAL-2025-2230 Malicious code in pixelary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed6e04cfdf17df0b3303f51acdf9e0e128361f17eef5fa028f6bd70d3436984c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2229 Malicious code in limit-order-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7ad6cba9faf323fb0ffae19f703ba40944f39673b2e8803037d19ff0990671f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2224 Malicious code in atlas-websocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8650c05b42abfbb5a69f65d884b445fcd038d3c56563d3ce5341af221bf80db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prblingd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7886e2696ffc6e35d7a80ad30ee51258e49c741e17d02b5d6c83d370fe5165a8 The OpenSSF Package Analysis project identified 'prblingd' @ 1.0.3 npm as malicious. It is considered malicious because: - The package executes...

Malicious code in evil_gem (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1cbacc9bc6d36bcde7b6cb93df89df1fae5c8f70a841dc916a8ba6cdad2ff95 The OpenSSF Package Analysis project identified 'evilgem' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-2154 Malicious code in crypto-invoicer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce45f4356717c34ab095570b175a0fa8bb5c8b2929e42e73d1997dc8fdec3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2148 Malicious code in d4rk0nm3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fcd44fdf07755c2f5060eee6df68679af14c7bd6185b52853041856db638c7da The OpenSSF Package Analysis project identified 'd4rk0nm3' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2073 Malicious code in symphony-data-map (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c3c641dfba68a53ede962e733dcc7d2fb8171eec7c4b192417a0f50066eeca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2067 Malicious code in product-custom-grid-columns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 620dece457b625966cbf804fa1e8bcd8b54fb2b961020453940961af4569f10d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2065 Malicious code in qaboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ac2bfcab360f7de45c230b1af8580c51697bb734b65eb7d85386f00a2fe83ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2063 Malicious code in safe-client-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 257bc819b8f443ea195e14777e23a3e5142765db2b4301d397fd894217a6c2a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2058 Malicious code in buttonfactoryserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 158238f70853c391431a3c0e3b53d79d44970a0d956562c88324b2c1da5e08e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2020 Malicious code in vdkweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7836de93244912bbac99f38fc331aca106065b40e6eb6ba70cb26eff02acd2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1677 Malicious code in pages14.0.0_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed3f8870b4796bd4fc8667ec8911ddba466acaed945970ce6cf2f67e2630a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1676 Malicious code in zohodeskportalsdksampleappsreactnative (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46d46cb1be5475917e2e2ec917b43cb05d3a0382d2fc6b288f7fc02089399be5 The OpenSSF Package Analysis project identified 'zohodeskportalsdksampleappsreactnative' @ 5.1.0 npm as malicious. It is considered malicious...

MAL-2025-1675 Malicious code in azure-boards-estimate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5462c61b481e30b0b6520e0b577f7617782f0e214162c66ab8adbe0c21dfbcb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1670 Malicious code in snap-design-system-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad4c0b89835a8fe7ca332902590a3ace5d2889d12e2d3cde10ee5dc5c695d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1663 Malicious code in react-native-windows-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c894e9ec1df07b7a9631c7a3fff0940b131f370c1e5c3d1846b7ff2398076e59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1656 Malicious code in azps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c955269826233e665b0f2e27c31b025ab3e5ab1ff1a46049d06df4c02d5a48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1655 Malicious code in secureshield4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f23bae727a469f26985689c3f9d59601b7bfd53e52b3cf2b271a56941e37af5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...