MAL-2025-40088 Malicious code in yabunker (npm)

The package yabunker was found to contain malicious code...

MAL-2025-40766 Malicious code in zebra-aroma-nrb995-project (npm)

The package zebra-aroma-nrb995-project was found to contain malicious code...

MAL-2025-9719 Malicious code in @zalastax/nolb-_ada (npm)

The package @zalastax/nolb-ada was found to contain malicious code...

MAL-2025-40488 Malicious code in yew-n31yx-vve74-grove-project (npm)

The package yew-n31yx-vve74-grove-project was found to contain malicious code...

Malicious code in @malware-test-serum-tidal-bloop-laths/test-mlw3-serum-tidal-bloop-laths (npm)

The package @malware-test-serum-tidal-bloop-laths/test-mlw3-serum-tidal-bloop-laths was found to contain malicious code...

MAL-2025-8700 Malicious code in @malware-test-haith-dunts-urger-emend/test-mlw3-haith-dunts-urger-emend (npm)

The package @malware-test-haith-dunts-urger-emend/test-mlw3-haith-dunts-urger-emend was found to contain malicious code...

MAL-2025-39487 Malicious code in wpstitial (npm)

The package wpstitial was found to contain malicious code...

MAL-2025-10022 Malicious code in @zalastax/nolb-_fui (npm)

The package @zalastax/nolb-fui was found to contain malicious code...

MAL-2025-8843 Malicious code in @malware-test-peons-rishi-talus-apaid/test-mlw3-peons-rishi-talus-apaid (npm)

The package @malware-test-peons-rishi-talus-apaid/test-mlw3-peons-rishi-talus-apaid was found to contain malicious code...

MAL-2025-8856 Malicious code in @malware-test-pokey-windy-courb-jiber/test-mlw3-pokey-windy-courb-jiber (npm)

The package @malware-test-pokey-windy-courb-jiber/test-mlw3-pokey-windy-courb-jiber was found to contain malicious code...

MAL-2025-7127 Malicious code in @citrixgs/g11n-sdk-react (npm)

The package @citrixgs/g11n-sdk-react was found to contain malicious code...

MAL-2025-9815 Malicious code in @zalastax/nolb-_bed (npm)

The package @zalastax/nolb-bed was found to contain malicious code...

Malicious code in topomat.controls.ctrlmaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f70236b8a23bd596788f7726490e4ac44c5cbcacf88bda2b8adeda33486c14d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @exitman_ctf/steal (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in logs-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a1814dc93accc153af6842fac26c03f1a685a3e32f0bba0fa8b91ccd0b2d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wsticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7332aa1bc786ac92ad941e301b7f14c28be71906774177abcf327c06dd9021b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ephoto-api-faris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab94a5cdc5abc193f41c8ec94e6c008b88ec7e5121bfd6b73b514f6664a946f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deals1flash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8dedaefeb09b39504c5df2e0817c5259711dd5afd429d887aef2a263a8cb1de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-vc-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57a74516506d551102adff697246e1f0a75c62372b7d5eeedd8b4f2dca093bcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zkevm-rom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebca28836b13291a84823420d145b2150d556abbd4d19fbf2dfeacf67a7553ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...