MAL-2025-49028 Malicious code in only-warn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf31c0df9e000c5a762fa04ecbaf0f9dd09103bcf544ca0aaebd43193b096a5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-1.2.5.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2a7a2c9ba3ee455fb1327bbf9794e2ff26b21cee0dd6d1feef0cb6b3d57da55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in log4action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9449001badf918b357c267f4890b89a6f8e1ddac2e45de3c21311cb5514d3f51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng_node_eval4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeb42c5e6381f2debe4e94826c8e1a29e0b0d730abf69e5ca521d768cde1ea04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47349 Malicious code in teselagen-interval-tree (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5be8aa7e96bbc224f7710d909c33b01b94f9386af11f8ba0303cd58104d6db1b Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @yoobic/jpeg-camera-es6 (npm)

Suspicious postinstall script executing bundle.js and the presence of unsignedbitwisemathexcess YARA rule match indicates malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38de35c3ae3f0f156a77b94484f3774c14c293d3e37531ec74c8277fde1ad5c7 Any computer that has...

Malicious code in @things-factory/email-base (npm)

Suspicious postinstall script executes bundle.js which contains code flagged by YARA rule unsignedbitwisemathexcess, indicating malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdc3773013abc63a59090ab3b457bc1e047f7a294edd5f35e6ce43840fc0520 Any computer tha...

Malicious code in ngx-trend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4ce4552eafe30b0ec3dfa40fc39012f7f3b56ffa76ec7c9304ef75681921318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47138 Malicious code in @ctrl/qbittorrent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af92aa639259dc9a287445d9fdbb2ec61beeb5adf71ff13a6e8f9bceb79971a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47131 Malicious code in @ctrl/deluge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d92c8c0ce4fcd72693ec79d2f5d112099c3e5d23e214a06327498cfa5b655fc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-59039

The CVE-2025-59039 incident concerns Prebid Universal Creative (PUC), a JavaScript API used to render multiple formats. NPM users of PUC 1.17.3 or the latest release were briefly affected by crypto-related malware, including via the popular jsDelivr hosting of the PUC file. In response, maintaine...

Malicious code in node-sass-supercluster-izar-apollo (npm)

The package node-sass-supercluster-izar-apollo was found to contain malicious code...

Malicious code in tailwind-config-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ac45edafa6ddcf4af5c1970929875bc85e162994b1e4a7e3f607529e1425763 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @navancorp/ta-travel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 475cb3266e9f473c951bb35f87e31b76f08d312ee1916977eb7a125f339f7b7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in juliet-golf-uniform-dayla (npm)

The package juliet-golf-uniform-dayla was found to contain malicious code...

Malicious code in mutation-xml-hologram-andromeda (npm)

The package mutation-xml-hologram-andromeda was found to contain malicious code...

Malicious code in kiwi-module-cdp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34281bc0357b483d9a5d7b84475fd6e4c2db6e993a61ff41636ee26e388368d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1d7d33c25e202a6ad49fb54065863092fb024863cb59952744ea002c333bab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vss-web-auth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70dc7c0837db09d1f3b1d98483b9ce346b56d8ea5ae46ee6b2d974d8be75ea26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 344da047769642e93f7d727b850c547fe9be2272daef99e44ef3f7c9b0f4bc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...