Malicious code in typescriptjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6082397917a827f5633f57e4e1ab18b29257f511ac05859c4c27d6b632fae026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dezcord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1376788b01add01972ac5e18172db4fbfcde5c78e3f51eaf8fc170e5d44532c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49073 Malicious code in xo-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e05e0bfe7b552fd008c4ad64a4d0f2d0a842f898eb7ab753451781236101acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49067 Malicious code in xo-form-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b076aac6d8c1d695f9ed279e4948c727abd708141c9256d1ecc0faa1f14b579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lion-based-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 693093745f698642f6910dfb2c66eaffd55d5d16d4b5bf13a71324e305f4f460 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vuejs-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a06ba3db5dc9f82ea682ce485a98f9fe76e64ba482445a08306e872524603f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transform-strict-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b1eba84b6c8867605a410bc60af12768528aecb23257d4925bc3376c2ca8b85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49031 Malicious code in powerbi-visuals-sunburst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 707c0139d214cc2c615245cb618d8e272c7868e912755bc359aaadb5415b1273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49011 Malicious code in inline-react-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39f65737779d34f941dcee3ee4e332a0ca54196d2cbc4e848e57e20ecf85893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-base-typescript-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cf3ed9d663000143a1985cca6ec918e32080154c34023108a381c3d7a1f86b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview airbnb-base-hf is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview wdr-beam is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview @apache-felix/felix-antora-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @gitlab-test/pnpm-v9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 352b39cbb73b3231bb6a6698230853fb58dd0313c7187e98a39dba4502226b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48966 Malicious code in @gitlab-test/npm-v10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a2cc1d206acfbb6ecfb92153bc522f6649d002c96ca2cb99d3dd7367520f64a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-test/yarn-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f274342e8c6f4a200134b68b571eb1eb5d9f01c5d28f5d445b0da3fff6808ff1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48978 Malicious code in airbnb-bev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e11166dde82656e7792ef9096c5b2720b2ead7d9209c71dbf8a8a07dcbbda249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48957 Malicious code in @aio-commerce-sdk/config-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85b2c7fad2af3e611f7fe4d8399529e1b897e4ca8838e1a5db0a2c61acb4d998 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview crowdstrike is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

MAL-2025-48972 Malicious code in acme-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b71a81b10d7836d7a4aeb72b36d2d7c0a4c94e7697d47254dc9c15ecd803bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...