MAL-2025-47993 Malicious code in jupjs1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09dd716116a32a34f5471f21e43619370e7d31e8313b9df22151340041e826f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47989 Malicious code in bildguga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5232dd55f7737f8e53116826bf0c0e5ba9365eff238e7ba6d86b925d8d12babc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48003 Malicious code in raydiums1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware caaa5b95641731d67c04f3fd81e8b46d3df55f5408a6388dac6948e16635abbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pumpswap-sdk4/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00e7cebe75e2b9e547a927e980ce03c494aa875762beaba4541eb71ef7222566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47982 Malicious code in tailwind-mui-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08c155a42aab3f06ab4eaf232b95dd7f49d1f53713c9aedd04da0f5054af7357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orvlllcj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ab4b3c617ed2588b83e702343b7afb883c2f26a6b15cfd1a269e7b928a22ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvxxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121764b98e89489abb502bcc35fb1b4cd7c34e64216932ba31a3b908a1e12a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng_node_eval3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 238f0c415626856e32367580d06f3d811603aaa0c8a73f6ff7e4c9a0f9452c13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47929 Malicious code in mcp-server-fixthis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4109cd9a0c196b277a25ff70ae8b8a81ee61aaac82c1d77bbb4e743496508e03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48029 Malicious code in hrm-absence-frontend-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e83d68d053c95b30727ac72a2707c8add3c6426eceeb22869d8c6536887ad7f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in affected-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d28082ed059e68e9aeb19f28b4d928db94d6f5392467f2fd362a468fd93bb6e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47832 Malicious code in react-content-parser (npm)

The package react-content-parser was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed262514ac58c1f13a4761aa92199769727342ebbd70431d112061e34da94a00 Any computer that has this package installed or running should be considered fully...

Malicious code in postman-json (npm)

The package postman-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e81e735aa1583841441847e7de0a269d581efabcfdcdac7cb7d6afd64df258 Any computer that has this package installed or running should be considered fully...

MAL-2025-47560 Malicious code in internallib_v714 (npm)

The package internallibv714 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949e0eb9d0a4f2ce9f9738485e24ab728066c412cd31cbc7445910a5e2709571 Any computer that has this package installed or running should be considered fully...

Malicious code in tailwind-mouse-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c878282ff4bbb3aef14ffb5e31963987ccfe6f981778c39c7e696435ee7422e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47503 Malicious code in tailwind-glass-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba68ec55869f324e11415be61a3a4240222a1807115709dc91804e63fad98452 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-vite-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c53bdee988880e8c288daeff8bb041022f69c78319375b597edab208129e0621 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in next-plugin-uni-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf38f21fbce8422c8375fdbc547879dab7eea1a9773a78740cee14d4919f95ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47299 Malicious code in conditionsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0435e7d1dfd8568f73471eb3a1fe65cbe2e5891606cc0f64ace4156091c56cb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47333 Malicious code in oci-console-plugin-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ce011b024c9c3dcf78578cbf559de94a96364525ace53ce28457dba2053bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...