887 matches found
MAL-2025-47137 Malicious code in @ctrl/ngx-rightclick (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26c981d94dd9e169f05ec3ebc64532f6ff7ce85c16dc391d51ae78b7dd6a43b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47198 Malicious code in ngx-color (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73e8f81aec4f30bf22f2a6e8a25a2662c6a72f8873311399d708ffb8d858f1cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47132 Malicious code in @ctrl/golang-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5ecdb39263cebdde95cdf053ac5e3bbb38aea40824853c2004d1ada8254e138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @nativescript-community/ui-material-bottomsheet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 648e72c71fe8677b6476210b34e01790ad107148f5b133254b3f9752b837fc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @nativescript-community/ui-image (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e0f3449039a2352fc57480496becd92f22e7c723fa82f23ea58051945133a68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47171 Malicious code in @triniwiz/nativescript-pdf (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dee524a059c5be768ba0f921b02cf030608c6377823ec2fda73727e66313248 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-53MQ-F4W3-F7QV [email protected] contains malware after npm account takeover
Impact On 8 September 2025, the npm publishing account for backslash was taken over after a phishing attack. Version 0.2.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect cryptocurrency transactions to the attacker's own...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Embedded Malicious Code
Overview @ctrl/torrent-file is a package to parse a torrent file and read encoded data. Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Malicious code in @js-to-lua/convert (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365d73a741a9c8513dad4db978ffd0658d1d583f07281a9a370a78062f36d6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-46967 Malicious code in ansi-styles (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82dc187071d265457effc48cb50c7ac209143e5da1a502a633a1c35b88aac67 Any computer that has this package installed or running should be considered fully compromised. All...
PT-2025-37744
Name of the Vulnerable Software and Affected Versions: color-string version 2.1.1 Description: The npm publishing account for color-string was compromised following a phishing attack. Version 2.1.1 was published with a malicious payload designed to redirect cryptocurrency transactions within...
Malicious code in mofa-xuetu-vol9 (npm)
The package mofa-xuetu-vol9 was found to contain malicious code...
Malicious code in namedpkg (PyPI)
--- -= Per source details. Do not edit below this line.=-...