MAL-2025-4582 Malicious code in typescript-go (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d064fc87553ee2c99deda671568a19f3fd4d86e854e01e944343d89c70a99faf Any computer that has this package installed or running should be considered...

MAL-2025-4457 Malicious code in web3ether (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71eb646c8da392b6145a0d668591f463f2439263b4a3dca2a5ecd0d6848f9ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4433 Malicious code in etherna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878da0ca7dbd6a63e9de7b962c0012e3ca24afca42be819c3b86af0600939fe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4389 Malicious code in prettier-config-rth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baf2a5f3efec1eace5c6720887b40bd8a5019168357ff749e8eef0b03c4b2a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-scrollpageviewtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcee80fff21305590dcf04ace763231bdd81fcc2ef72bf8492ed79a60a17cd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4103 Malicious code in migrate-lol-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88dbcb391cecbefa568dbffa3d4296d9fa09eddb14625e899283b70920acaea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raydium-cpmm-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a68f5f91f0785da373b66be5a860df09b0d9ce675bc77749fe781b9d85d8a1bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3879 Malicious code in convera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56afe2801be07df7d5829b5645331e9da9e3b531e3bdc930c293a153272cf864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @johndeere-tech/helios-ng-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cafd54c91f17226053b5247b4cd518c79cc4e6462f2bf35455fc9a9f8b55c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3647 Malicious code in slimdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2f226420f343b927fbc14d4e38eba517fc139753e2d5a7006cc0a251cdc8b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in myexampledoges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f73cffbd113f766f9b5e4d0a68d2aa94c67ed0b3521da15d8afab243bdf9e24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3225 Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3186 Malicious code in fasteners (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fdb51a924fadc7b449efbc03766a7e23061654ad3fb298da0dd3c89c896e1b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3089 Malicious code in accessible-textbook-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32e7a797f9a6dff7e1c114b0da31a73df0a0cda2dc4590c5512d243f32dc90b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3057 Malicious code in @hongfangze/verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d21967c00c2a461014b34e6cbbda87d6aaa78c3058709e4b02f3125db3da56dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3053 Malicious code in @hongfangze/random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fa0305129280dcc792459235adfdc6136839cc43305dea19709f4970e9edc56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2683 Malicious code in loglo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c644d48e0fecc2efac60d1def8ed1015b9c0bdc932f0bd6d8bdd462b67c0aa3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ofjaaah-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69d28e1655217e54d687a03a3c6b7d2f1bf2e5098277d42ab0072f39885269bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2538 Malicious code in wokes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2eee287f83d820b42e0fa26940bfd28705171640064c0a0b3bce48859675fb96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2407 Malicious code in redux-debounce-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aca08bddcbc410d19f5cc85276c487b26f76e578993be572baf88e57b23ed48c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...