Malicious Package

Overview auth0-templates-scripts-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-5863 Malicious code in ltiditest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83fb4582ce1cfad526a2d45083d7e6199fed61f683196be2584060c68bcbf822 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5544 Malicious code in chunk-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2ede01f53bb06fadc20c1b7cca9c6d00685c017c3d99901a5cd8791140e2ddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5546 Malicious code in display-fetch_stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93a196cb5e04250355d4a4e51d12810d2324320559124570c03be4209dba9d1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5526 Malicious code in veynlinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb6b2d752cc5210fe846e1420ea6448235027e9ba0b87b2380cb75b85aa66f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4307 Malicious code in cardbuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1f2276e716b290bb85f3f6aa2adeee74453a0e1ed7fb32e56a420b3676cffad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2456 Malicious code in calculated_members_message.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f739b2f53d332843f6a1bb7e1178139499ddf08aa28511160b788cf95a1cd0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2357 Malicious code in airbnb-bootstrap-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ab32fc1acc308cef69cd2c28a15f3ca79fb2ebeec3a94c3ece78de110b9229c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2023 Malicious code in @ethena/shared-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aef2408e95a098dd74ce27cc6b45910bd5662840209b1b083e75ccfadd5f51c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...