MAL-2025-49021 Malicious code in minify-dead-code-elimination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae32f7c04b27629bde0236a0f5931b70208313af390161f1d6564c0022d9f39c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @jameson777/mytest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcbbebb7ce5ba46d06081d584c7329a31f024402453dddda87786d5a8e963bac The package @jameson777/mytest3 was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48779 Malicious code in tailwind-config-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f09d3964a8d2d069f80eb368ccd713c6c2347bdd6790589bc55a96f726904eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shadeforge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eea02ef501299fe8810df8e336242386a2ed75d455554c776bd3e4f4463662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48592 Malicious code in discord-utils-enhanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 678d1a77a40407ca303a4cb46ec3bafa609ffa4d3e354eac59e799a499fb4b68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tenantadm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7ce8c0c0c24aa09e7e543bac2dca10d2642ad336d071e8bc5ffac9be251ff10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48421 Malicious code in deficonnect-internal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f3098a58343ae74219c429df56aab7d01b71a39b84a9165b0ee3679a6964f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deficonnect-internal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f3098a58343ae74219c429df56aab7d01b71a39b84a9165b0ee3679a6964f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in akdump (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 768e342b3ebe7ed62b20a4c11a721d893c64dc61ba45f4933d52d98b6c9d1135 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48403 Malicious code in akasearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1075d10450cfce61ccff3b97a9b8bf18a7be1d286b307dbff6e0018768baa4da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debug-mj-v3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c0451e3b813ae12fff8e9f76bd4570a074a6bda1a7391e28f789182a6cb0e6 Any computer that has this package installed or running should be considered...

Malicious code in internallib_v125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab77b49975a46f2335153950e340dc04f11da41aebe8c463f96f99d7e831fff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qrcode-pretty-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d496b8a5c9c6deae643c9b5c4c4ea1e6f3ee264cb968c3702b1a2e91b40bbf1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in melichat-chat-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c2d41e4c7fa96605141a046fcb172ffe601946ad931be7b5e96e935803c75f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48250 Malicious code in mad-10.1.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b7ae35d8522c82d7af230bc72f76eafab00194667d0a543b69f62c609e769b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-3.0.2.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf1bcf59e3fd43b588530451a4eade20f273d04e69831c45aac60075102e288d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48110 Malicious code in redirect-1p89nj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43688fce1f12de08acc0da78811aac96ec28e59b080c8cd03c83ca80c1b69bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48201 Malicious code in redirect-o92d2h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77f3c6a2ba50a265c6c612f8d9982534cea0e6b9441dec88bd1a7f428adfa8af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48223 Malicious code in redirect-uc8xfg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de2e181c4a03984448f00dab2cc68d9c2b84d9de013b3ad9e8dc72b9bd138b81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48189 Malicious code in redirect-n06xhl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c0ba3993bfc06f9b6d17af5f983bc485d686259595efa583d0f0b7e459a8bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...