MAL-2025-48195 Malicious code in redirect-nixl3q (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd2084ef33a02435f2b8aa0028983b0e47124d66f442e8241d323fe37176caf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48236 Malicious code in redirect-zfwzmc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4cf8696d75e3f701c0ac6f79188258fdc6bed64f408e75f30f12f0978a5007c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-gjl674 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bdb836520004a9db5e1f2dc393f60b5fe6e9e65fb767a0fa9a657ba4ab54219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517d985985f415a1c4c91f10bdfc1757c72f7331c1f00d61ef96d902603783e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48045 Malicious code in redirect-4iyfat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308da4bae6f06eca09a47a9ffea24c1ed5afd9ce25ccb18c266d797c1f29e360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48080 Malicious code in redirect-za4566 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 079f93dd87bd8ef6e446d2275dc64e4b6e5e995fa22a692166b41c03eac59d02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48074 Malicious code in redirect-t65vz6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27ebb46bbffc22ed2b34f37780a390b6047cff47cc00f7c14696578d356a57bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48060 Malicious code in redirect-igk4sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e8b6890f2fb4b7dbd39213b59882e2884b95002a8fd1a067c45872a38dd6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in buildkite-pipelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b332aacfc4f2520e8583e30d8e1081566b0882648f280646c0f767af896cb200 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48016 Malicious code in testcatplzignore2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a8b1d8bd766d3c76c7e4ebb5e2f9226c1b7ae4cfe0c8ffcfd41ec2ad8916520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47969 Malicious code in @pumpswap-sdk4/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e7cebe75e2b9e547a927e980ce03c494aa875762beaba4541eb71ef7222566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dompubsub/dompubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f03208a21f43efdf0471c0a1908c3a7229b8ebdd3572b58fe5921496b85902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in objectidencryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a56edf53649a4f75908a2ae90590fb378924470884be87f373662bce9eab61e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ca07bc07dea87a05077e44cc62e1e153cd9d75fd15fd02382ffc42266d072e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47947 Malicious code in orvlla (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56ea7ddcdbe3dab6e4c993804c781fc7cc5d3b48ffc11fea15a0adbee62d9296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47945 Malicious code in solarpeng_node_eval3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 238f0c415626856e32367580d06f3d811603aaa0c8a73f6ff7e4c9a0f9452c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mockup-plugin-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558235acfe4f70dc63b4fc13a84d52053efc759496cd14e3be1174f7ae4ee3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47832 Malicious code in react-content-parser (npm)

The package react-content-parser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed262514ac58c1f13a4761aa92199769727342ebbd70431d112061e34da94a00 Any computer that has this package installed or running should be considered fully...

Malicious code in my-test-module-first-vespero1017-santiago (npm)

The package my-test-module-first-vespero1017-santiago was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33810a758a26fa95007474f7ff42b136af0c4dddd650622180f655a72748472d Any computer that has this package installed or running should...

Malicious code in shop-chat-agent (npm)

The package shop-chat-agent was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24fef9fb2ae18a423f86505fc26cb8fb7c6b2c17038ae2833ad9eea5238c79f Any computer that has this package installed or running should be considered fully...