MAL-2025-48272 Malicious code in andes-react-floater (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63aced74061cbadf118f22491f4edb9450b8ab612b289b34f3b0acefd7860d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48281 Malicious code in frontend-photoswipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08a30dcf287f7992949bf9a4870c6201c42b3aa3b59e0966a677899b4bca376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cx-hub-interaction-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9bc1addddaee6ed4aa8352a5162c828bddcc53ddee490fb211f76247c23cd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48274 Malicious code in cbt-gs-switcher-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e281e2aff0b1c284640210a317cb5796b2cfb60eccbb61d04d4cfe8941d3b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48266 Malicious code in react-copack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57401915f2c34bc9f6acd6172ce514016093a6857148c0d46ef0bad52792c357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview chai-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview phoenix-experience is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48248 Malicious code in mad-1.4.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612d2c6761b96cd5e5e8c88a54cd3432e05c78ce108a922ff057dfea48b6b951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48256 Malicious code in mad-2.4.1.2.2.8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56c6fc06b90e0e637cc8ef419f8a5844e909deaf9cc68f1c73e231757e6f214a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mad-3.0.0.2.2.8. (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f55ea64844c2d952af8c4418678dabfad5ee8b387cb2efacddea6fa25021240 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48177 Malicious code in redirect-k1jlsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d546307dc3fa41df2f485a0f6166f951b2a8e22a3c8ef77e2a07e5f88258df6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48168 Malicious code in redirect-hi5ag9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e49ecc050fdd447aea90673eeb66d24b8178995afbb51a3b4a91d40d83bc7dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-fohapy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d0c91babb7b418b4433ead89eedfc26e640d7d909cb242d8c641dc853a257e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-sykre1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f296cb64fbc02775939f48a02ff61324d6099ed104e812a06f43ebea542989bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48193 Malicious code in redirect-n95xyv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290840d73f97e45dd4bc9aa7b7b5111f4341e7c8db6b924ca7e6fb1f444c4aa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48188 Malicious code in redirect-mrdlde (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 170742d09410096f98512248795c7ad4022ab55a7d5494833f8c12584bc1598d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview redirect-cj50k2 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48213 Malicious code in redirect-shqv6v (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51b4e79ff7698297acecee22b28fce7722c6c7173e739ee265fae8cc583dee68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48134 Malicious code in redirect-8py8qs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edef26f8df91a6f11f9c17ccf8e5f214a29f90109febd7dc448aafcfe29f8ccc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48209 Malicious code in redirect-r0ajvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73f65474e74843585524ba438a44b128929068f1e44a755666386073a02d0b16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...