MAL-2025-49386 Malicious code in tailwindcss-twflare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ae450cb567421e91b0d5a8fbe5904a5136ecfcb74a4a78ad0244beac01d011 The package tailwindcss-twflare was found to contain malicious code. Source: ghsa-malware...

Malicious code in @bbkkfkk/pre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c1f8ea16f76d6d90b7428b1448704b5b42f2db84e96945cc9c85237013060e The package @bbkkfkk/pre was found to contain malicious code. Source: ghsa-malware 18fa96a25503e48ec0ab99b483a5e7c4c8acd355e03c509295d39daf6509b21a A...

MAL-2025-49360 Malicious code in node-xpnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f358100a356075faa746b4929e5c4afd67b681e4fd85dd4e8d570af09aae4da The package node-xpnav was found to contain malicious code. Source: ghsa-malware ecad27e5e27726e4839a252c295fcd6d7a77504b7f74944706a47f7bb2a715cb Any...

Malicious code in orderly-network-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec35c18a8349d3d2dd52575ffa769fa141be9d1c7b99b0a3e95d994af6acb495 The package orderly-network-config was found to contain malicious code. Source: ghsa-malware...

Malicious code in icon-react-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad97a4843ca8933070ecec7c05bf536be6b6a80d87925026a6b7be938fd264f7 The package icon-react-fork was found to contain malicious code. Source: ghsa-malware 32d3f4313eda9d40aff4d3624d6f7f534df05b45f0f282fab8e0f8211c1a38c...

Malicious code in etherdjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d33f9046c1fab70c35f189dec4d15635c281418afb4442a639145fc8e445c97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44b06297a4f222643e8b7a977e7dfd944c0a2666d5066f0db0a61674b2ea84a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aikido-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52c1bd3edc12ef36437639352924906fec14c56f2696f2ae2cd9e5d9d03522f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jira-ticket-todo-comment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f93f4caecf2a8d9f056f2b72cb51b1905579bf89bf8c1e994e68028c24d2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in durablefunctionsmonitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6bcceee8fd7c48b4e3a6785a12fbee378528263f9f948def2884033173d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a2dc971622a44de97536e68fb7287ef32a7a1bdabe0d0386eadf248219cea54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spaintest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2104fbcce90cd97dbee8fa4f047b5bc21a8b2eb1009654e1d6e6542f95b9ed8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polyfill-corejs3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f30a9982ee60b989a218dd73482f8e0d5072af0ab17558731b9023ce937e7dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-motionflex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45e8b8aeb958d83e7620d1b2039259900e9862ef2e915dd553d1d227ec50dabd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inventory-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05cf59554b75ea72d28437b6c5c03a829a552360ef8cdabf12621be0bc549a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in useradm-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce2bcbfbdffbf03bd25822f3d63f902505a6edc5efb3ef610fce41007b8620b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-setting (npm)

The package tailwind-setting was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 850a3c165ca8ecb1060d82506ab99a36786c8a41575310ee91507065a46d313d Any computer that has this package installed or running should be considered fully...

Malicious code in gridmancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60165b38818ae73f1e523b9b54cd4793394ad672c0a62b08e71f54457c80afee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usage-tracker-secured (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b7a443b3167fff4524481ab0e2a965023fdb4379674c580d905e30aacc7f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...