EUVD-2025-48974

Malicious code in yelpingporpoisez3n npm...

EUVD-2025-39671

Malicious code in fadhil-peyek45-miaww npm...

Malicious code in cindy-sambalado96-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff805f2635e738a510d97fc26ccb8d5231c20040c53eaa740016334391918686 The package cindy-sambalado96-apidev was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in udin-nasisayur48-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53ebad8b3123cd3179925f4c81772819a6d92fced107adf912859808049e361f The package udin-nasisayur48-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

Malicious code in vity-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd2e751d57f4a04b6019488c79debf3467879ee63c322f22ebf35544584cff6 The package vity-toolkit was found to contain malicious code. Source: ghsa-malware bb4930932127303392cd175222ad1777bd0119cbea931b6bfb68c8913bbb0a40 A...

Malicious code in @aio-commerce-sdk/config-tsdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ae61acddeafb85596fd6c4a2c12309826d57b53250d789af0b1145bc8a2c3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crowdstrike (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11cd49b95ecfbbbeedc96c140184f8543c29b3a6b60688c32bb40459bd164a76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48580 Malicious code in node-get-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac8d13d5bfac4dd2762c47c3c87beec273f4f7481b6d8b5d405bc5d5a9fa3f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-conductor-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94fd07c8d4a77f846cebefc65582f689ea864796af0d0cbff8241f82d31a97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-remotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ffa99cd71dcbaf3fac3816f0a75102c058edefd706bfcf1803d0c50a5f43dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48221 Malicious code in redirect-u0e2q7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8b0dd60c89b0c84968f34108c06d0e58951c2c9a1b03a2b826c6261e7da224f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in filiogrean-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18efdf5e885e4f3e7eb4999818f65f73aed08d4516593db92d960044927eec86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47990 Malicious code in e2e-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9c8d68688f22fea09a5713fa230e86e17ec757b0ab4f80311cbc5312fd0cbf0 Any computer that has this package installed or running should be considered...

MAL-2025-47830 Malicious code in nodeapi-json (npm)

The package nodeapi-json was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware adf38cc7ff9fedd8e0e5018c03c9141360823a8c5143181264185160ee040728 Any computer that has this package installed or running should be considered fully...

Malicious code in @sev-ui-verse/api (npm)

The package @sev-ui-verse/api was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414d159764ceef8011dcd7e75ef5fbfb99ec42da34486271031460875812f54b Any computer that has this package installed or running should be considered fully...

MAL-2025-47501 Malicious code in tailwind-cup-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b63b6f29071fd3e01046c19dd01c0f863e62d3c2fd92a1f51d040e5f06ec839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47464 Malicious code in fast-proxies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80cd3bbfb200cc0af579901773019a1d152ff4adda7764bbae1b9516e38a11c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oauthly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e9d4666c50bc7bc1a5f83811020d5da995fc251b9ec96a9ad3b8a3c6e2ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47290 Malicious code in @ui-ux-gang/devextreme-rpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc643d20a812778984d46636db2ea2e7e08c97ca2710b212c0b07a023461df59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tnf-dev/mui (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e45bfa0b3e9c8d62f8156ce36fdba553ac173d52797fe4ddaf4ffd6f447bde4 Any computer that has this package installed or running should be considered fully compromised. All...