Malicious code in webpack-inline-constant-exports-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8ae870fad74826ac57af33f27bdbe9e74f667ec62aac01b5c9e55a47d36001 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zqdl55513 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a623c3e69f707a5c5284a6e298d4d5149c282064e65985928f1277cd258d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selenium-plugin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6e002fd5736f780c2fc01668d4e37d008d211fa2547b96cb960b11edd5b87d64 During installation or importing, the package downloads a small executable and register autostart of its. While it's hard to get the full activity of the...

Malicious code in npmrunnall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02e76869051760cad21e27046ef3eaf4df72e1188ba6eb04573327b86a2fee49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ansem-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11f7a5b4109593e20da5b0a2b685ab645dbec1691cf9b162bfe1ff3086cb81b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dhwmfs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7732d14f5f18b93b76e0b9164667441919050e960414ac343c60a460854803 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agl9v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78e20d511a34d24103b62f848d649aa633dd8a711dfa83942fd04b045ee216aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mp3-do-wnload-file-to-day-273202-shadow-of-fear-t2vwz-niymvj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14ae460e22257b2e986bf08dcb67cb44de7a372e5e84275e6896a9ecc6818cb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in them4on (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cf7aae5da80be4c617408e1862c8307fc970f6cbfdeac0d07c42d5694af6162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Microsoft App Installer installer, related to the lack of mechanisms for encoding or shielding output data, allows attackers to perform spoofing attacks.

The vulnerability of the Microsoft App Installer relates to the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows attackers to carry out spear-phishing attacks using a specially created malware package...

MAL-2025-5239 Malicious code in youreallydontwantthispackage2132 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 594e65e2115609e28b51abcb8b97695199a1eda6a4b72b2513bef87f5a74a211 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

Malicious code in dwieuor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8cfca3d58e3997471c3ffd5e50d0d81b3d43d1af1d89e2a84d4bfc3f033f259 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/ad-aliquid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37dee143ec953eb7182e50b3cede7229c9f722ab2874ce75a66f4e12231cce17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/tempora-voluptas-distinctio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06eb0ce1f1755dbe989799a1fb7a32c30ee634d6de3cebffeff6bb30d72778a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/perspiciatis-doloribus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62adcca6935cdda386bddef98ba2c21c3edbb6e6813e0111e94244acc29f9210 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/iste-laborum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21c4d3b647504047f2fd23cce7f469a51b493ac50f2ea5cb6184691d768df301 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/eos-eum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ce102c4972b37b303b2e013794f1674ce9a529b5456a5fed48cc62fd501769f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/aperiam-cum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb4500021bc56d1007188a6c5a34135cef19214d511bdba545eac3a7fcae98ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/id-fugiat-velit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ace3906fe2cf66de6f9c0a2a32b2a356297501798a63aa94742747775b816b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/sed-beatae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8040c14a5668a9103392037fee9d29c5c7d85667e330eb5875813809919c650e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...