MAL-2025-4694 Malicious code in some-private-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c2eb038ada13a2b2c86adb72a460b9a2e327e9682b3ecce38839b4f8de281d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4477 Malicious code in firefox-screenshots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d3138a26b7ea5f91361ed825aad5e3dc068f6b6655b68dd357565767f5ed968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4580 Malicious code in style-value-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b01a73e3e81e6d1272878f4d16c5a569e2773f609a5fbf17dba53b3d56127963 Any computer that has this package installed or running should be considered...

Malicious code in transaction-generations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8ff356a1c2926c7e0ec73dee2112061e76093a5055a3930623e9c25a47af3d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4065 Malicious code in cdn-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46d020b8f0a6ff1bcbb09ee63d0083f060a65c38e6f1d6518e860750e837544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4120 Malicious code in rpc-selffbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f4f3628317a89bfeb015c017a0d80269b1987fc94b3e9d84199f936bc4297a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4013 Malicious code in os-info-checker-es6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7d48d1ef01f6c43c34237496128c5593e34836a51db6b931a38f9d1520562c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3967 Malicious code in maddddddterialxtest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fba69f39bbe6232d97fbed1db9a38bd6a0de496acb93a26672b5bee18a28a307 Any computer that has this package installed or running should be considered...

MAL-2025-3922 Malicious code in twitter-api-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e845c35069d8dc1f87dbd947c508662a7462d951bfd0ccd915be80cb99502a96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3826 Malicious code in defipulse-adapters (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d5536c5f6bcb7069516bd2682ee50724915e891c5f1aa5c68ef38d32f9e2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-method-indicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60414121dfe5a164bd132ab93d581199d55ba6bff4e937c7b52ecf6ca5fa1e0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typescript-plugin-some-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8d085d197d92c4b2e513d151403cdf29607fd2b87e7e6cce26231dd6a222e76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3589 Malicious code in twewewewest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24697bace34244c6963d54b8439296aa2903a23b68833af4712c3506830d198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easyship-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb88996af76273910ad50c925b80398cf3500db0b334d4785f6d3d3f415a3b51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3552 Malicious code in internal-payroll-lib-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b57b13614231552ff2a81bd698a53edcac5cfcc943ef879a6a2e1de08d7fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3532 Malicious code in nsemea-core-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dad870b6719a7ca56397739f03731e2e597c7008601ef058d93c6b312f6b4725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3391 Malicious code in dowload_ebok_krebszellen_mogen_keine_himbeeren_aktualisierte_by_prof_dr_med_richard_beliveau_dr_med_denis_g_505sj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f5b903af0837bff399f0cd318f2e34983b7fdb935b44b8e599047ce1b417b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3178 Malicious code in @medialink-ml/yuzu-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9676f94f42529927f93195df004b5ec83e0bc0487b3033ad8717fb0384fe9296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neo4j-apoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446dfffd9d2f4e171ae7e9e3d88c997b8c9c9437d3f9c6b47174ad17ac40a651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3150 Malicious code in file_downloader_sakib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89b472882107a6f4f9aab1e84c4d4da6dc75509d335db53e6943f1d85a3618b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...