Malicious code in xo-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44b06297a4f222643e8b7a977e7dfd944c0a2666d5066f0db0a61674b2ea84a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aikido-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52c1bd3edc12ef36437639352924906fec14c56f2696f2ae2cd9e5d9d03522f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48968 Malicious code in @gitlab-test/yarn-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f274342e8c6f4a200134b68b571eb1eb5d9f01c5d28f5d445b0da3fff6808ff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jira-ticket-todo-comment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37f93f4caecf2a8d9f056f2b72cb51b1905579bf89bf8c1e994e68028c24d2c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in durablefunctionsmonitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cca6bcceee8fd7c48b4e3a6785a12fbee378528263f9f948def2884033173d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a2dc971622a44de97536e68fb7287ef32a7a1bdabe0d0386eadf248219cea54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49054 Malicious code in ts-important-stuff (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51d9feaf6c16ed445360458078fba02a911ea7425097457808f2886f7416683 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48989 Malicious code in bernie-plugin-l10n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd6d3c0bbb9843d7995ddad49f2b4142829723406f19e006a25df0ff156e9451 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spaintest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2104fbcce90cd97dbee8fa4f047b5bc21a8b2eb1009654e1d6e6542f95b9ed8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2026-7614

Name of the Vulnerable Software and Affected Versions libjxl affected versions not specified Description A crafted file can lead to libjxl's decoder reading pixel data from uninitialized memory. This occurs due to an incorrect optimization that causes the decoder to omit populating certain memory...

MAL-2025-48784 Malicious code in vite-plugin-parsify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 031b7573beae98422d50771f010df5ea83910b304700e644b2e5b8cb6111aa59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-utils-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed8ff35970f72cb3baab16f272e85ee20139056fb86d4c04e90b28ba38f464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in polyfill-corejs3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f30a9982ee60b989a218dd73482f8e0d5072af0ab17558731b9023ce937e7dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48595 Malicious code in glowmotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 689f84ac7556578ba4404c09552cd9f86ea81c1dabe28dcfdc613fa4ac233285 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-motionflex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45e8b8aeb958d83e7620d1b2039259900e9862ef2e915dd553d1d227ec50dabd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b6d6c0aead094725047d0ea623f7c50d3f1c9634f1381cdf31a484100178974 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inventory-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05cf59554b75ea72d28437b6c5c03a829a552360ef8cdabf12621be0bc549a11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95b2a0aeb7e210157ad59facfa9c0e679873c34a71078e93e3410440365970a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in useradm-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce2bcbfbdffbf03bd25822f3d63f902505a6edc5efb3ef610fce41007b8620b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...