MAL-2025-48436 Malicious code in tailwind-utilx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab60af52b9e400a2e1c3d1ded16c4d31065881c813437a8951595cc83e9a3e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cryptocom-corp-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1239238ee10c3bbee24c5972edf8784d63ed06bba75e7ff07eaf23dde788c82f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.2.3.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd85e061204de201938d7f92d980f9e42a2d4c370732eb5b9deb987982012f75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48245 Malicious code in mad-1.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3660341162df2e49bb5407e0ca9b3bd7df2ef2e7aaf9c8cd43ac899b45d29b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-33419

Malicious code in redirect-h4y8f0 npm...

MAL-2025-48233 Malicious code in redirect-xs13nr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049bdaa947906b364017bb13767c04598a526833d572bdc908840a74996a93d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48042 Malicious code in redirect-1akzwg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30f5c4663a5a7693f506bb067f1e43b5b85b97dac1a69e0072c769834a60ce7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48063 Malicious code in redirect-l0m7on (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5f0c29bd299b19cfd665b1cc3de528b54629cf325cb6bf340e928a922f62f0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48038 Malicious code in qr-code-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6749d8eadfe0585d427c6322c10d15c81e3e58171b08a31de2a4abbaddfb9264 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48082 Malicious code in storefront-search-as-you-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48018 Malicious code in zero-slot-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e159cc709d3420c86d6676e754cc1f57818b21ccb863dba4d357ab6476c315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-config-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a671a6c3e625ad567f217586db00e2b324ca408c883c44ac1b74ebf292ffef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47961 Malicious code in raecahaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f607e854df80ada9b6aa0de8cae2e2893f1520b60bfaed0ba5ccee7aeb607b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47923 Malicious code in dragon0905-vite-tsconfig-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d093a7e1069372d30327532f4658ddd329e4d40fa41dd7f0e505ca60650177ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.device-simulator.devices (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abc462b44ac8ebcd3a4086ec95ca09fa7e919a9e77402cbc606744d36da1ac16 Any computer that has this package installed or running should be considered...

Malicious code in @sev-ui-verse/snackbar (npm)

The package @sev-ui-verse/snackbar was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92a070917a547edd5e73a9b1b800cdd1d7e726e1886a712901dc3830d831abe Any computer that has this package installed or running should be considered full...

Malicious code in iconfont-icons (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b7bb9c2f9da72d5f2921c8a1f5f168c03307649d8ed230ea031fde029d890c0 Any computer that has this package installed or running should be considered...

MAL-2025-47330 Malicious code in mstate-dev-react (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 014addfef55f28c8297c28c565e3a13e01c74ef273175eb8c2389b4e41921e0a Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @crowdstrike/tailwind-toucan-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815645af1286f8262a60ed5ee1cfb7b699786a707007300ea5c62602046d2460 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47322 Malicious code in kinyongi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d732e3667e35428369a2536b0d3d1ba6f5afbedd13b166bd769316c2ac8c750c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...