MAL-2025-8710 Malicious code in @malware-test-herms-teats-virtu-curia/test-mlw3-herms-teats-virtu-curia (npm)

The package @malware-test-herms-teats-virtu-curia/test-mlw3-herms-teats-virtu-curia was found to contain malicious code...

MAL-2025-8797 Malicious code in @malware-test-morns-bairn/test-mlw3-morns-bairn (npm)

The package @malware-test-morns-bairn/test-mlw3-morns-bairn was found to contain malicious code...

MAL-2025-38522 Malicious code in vk-hr-tek (npm)

The package vk-hr-tek was found to contain malicious code...

MAL-2025-40082 Malicious code in xylophone_z93v4_gkhef_yellow (npm)

The package xylophonez93v4gkhefyellow was found to contain malicious code...

MAL-2025-8551 Malicious code in @malware-test-chock-prows-blush-foggy/test-mlw3-chock-prows-blush-foggy (npm)

The package @malware-test-chock-prows-blush-foggy/test-mlw3-chock-prows-blush-foggy was found to contain malicious code...

Malicious code in gradient-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7856f4d5db8c9074c3633d2d5a61782c18536a58a84cb8ad56ae029525880875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tpvisaguipost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6f0d5f4277fac7faf8e66286859dbf98161bba4f7920a7123c337536147fc1cb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...