Malicious code in @pumpfun-sdk/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe74efc7770fd428add3639b89ec07606c3be7a22d6c185ef00ad4beb39b9c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47274 Malicious code in @teselagen/liquibase-tools (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0428d8bfa4eb7de9a33acaa055690a899b5357c7845f06a184b4181e5f8a0b02 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47267 Malicious code in @rxnt/mobile-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673ac0ddb5ed6ce96a6263670496eea6e0d30cdc83d11c2de776a84b4b605635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47136 Malicious code in @ctrl/ngx-emoji-mart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdebc530fc545378519ecba24f04dd771e806c5e76fa5160d3d6bba03ee0cfd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47135 Malicious code in @ctrl/ngx-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dee0d376ee8686a2ea0a7d46ab60c012856d8740b3563848112afbeb6d5b80c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47137 Malicious code in @ctrl/ngx-rightclick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26c981d94dd9e169f05ec3ebc64532f6ff7ce85c16dc391d51ae78b7dd6a43b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47198 Malicious code in ngx-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73e8f81aec4f30bf22f2a6e8a25a2662c6a72f8873311399d708ffb8d858f1cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47132 Malicious code in @ctrl/golang-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ecdb39263cebdde95cdf053ac5e3bbb38aea40824853c2004d1ada8254e138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-material-bottomsheet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 648e72c71fe8677b6476210b34e01790ad107148f5b133254b3f9752b837fc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e0f3449039a2352fc57480496becd92f22e7c723fa82f23ea58051945133a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47171 Malicious code in @triniwiz/nativescript-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dee524a059c5be768ba0f921b02cf030608c6377823ec2fda73727e66313248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-53MQ-F4W3-F7QV [email protected] contains malware after npm account takeover

Impact On 8 September 2025, the npm publishing account for backslash was taken over after a phishing attack. Version 0.2.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency transactions to the attacker's own...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview @ctrl/torrent-file is a package to parse a torrent file and read encoded data. Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in @js-to-lua/convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365d73a741a9c8513dad4db978ffd0658d1d583f07281a9a370a78062f36d6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-46967 Malicious code in ansi-styles (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82dc187071d265457effc48cb50c7ac209143e5da1a502a633a1c35b88aac67 Any computer that has this package installed or running should be considered fully compromised. All...