MAL-2025-48571 Malicious code in mender-conductor-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94fd07c8d4a77f846cebefc65582f689ea864796af0d0cbff8241f82d31a97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hash-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 797126e9eb0f67390ff12806c31b6cca28e65c31d1eb9b186dbb591b0db9c941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dist-decoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d6276f9115715018347a416b17686c81064ab130b386dacfdbe52f80bf1a2d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-loadcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d590321a232bcb801aa8ef974d8eca8774570f32d2f87e026c6694aff0a6bd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in company-request-access (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49052755a86ef81d8b6c55e055db2639127cd68573b30d2725ed12e8e0d61ea Any computer that has this package installed or running should be considered...

Malicious code in mad-1.2.7.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cba7624ffbb89eedecc7a43ac6061c7603bcfa4e335ba5191657b946b130a090 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-style-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 405756ca6b244b2da943e5c301d715776df3e507385f429dc2a6cf091a682931 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in matrix-charts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec928e940d4a9d80d7e512630b842c44283854acb9421a3ecb97c288f07fb7a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48279 Malicious code in frontend-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd81764709c7d0f5174dd0a979519b3c85894302b3df75acedbf1de8500d3c07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-1wc4gw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41fe6c9bafdaeb273178f0f0cc9ec19f30ea4e747a6f34b46d6f5e1b4ab5ab25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-q84l3v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2989dd266ef12e7bf2fcbde54fc67c8d6722320a84938aa5bed053b1259da8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-b9diha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b43f0986bc19f936046c56635f43614630486a03ff3e5db6a62208b9b785a296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-dna9sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a271bd9d72bad88d346f57de232024477d893363f1c36a0292ca8835c5c411c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-vpvoos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e695b309180dcc9b847064485341d93b5b0eb4a942f1d2affa0f9b504bfd18a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48158 Malicious code in redirect-f72kyw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6107d344417e3c4484c0f17098d6f6be07c4eb5c33a23abe4f254b7180bf1c81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-qbzqro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33232292b94991718f7dc9e3044578cf9cff875e62f2025617495095a2b6ee30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-cwfpnz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b0953ee0666a602bb2917d54216617564fa62b9be8059a5990db2f5635ff35f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-uplctp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e78d0574b0be8d00d636478b373f3cf1e8c591eb69245a667bc3e556d886620 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48101 Malicious code in @testcarrot/supply6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1879de03e36cf280adcff93d8fbfe8537bb68de7e372b70c0e6b80adbdfe21bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-a1gs61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 698eecacc2b74ea1bee2f5353e823c9266d05f1b70a1fd176dcc8f74d6d112ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...