Malicious code in redirect-x4imdv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e340a1fc9722ec202ee8f89e3e9f546aacee8d861f577e4fad9fe2bb02752023 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextjs-edge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e760ae97f3946b05b183b7e2d558f757bb3bf66afe4199dc5e2d3b54aa0b5e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-61687

Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...

Malicious code in res-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef24fa6bd07739f45e7e31a196535dc42562533848a3b3dcd6b7bc98b16ff4dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48001 Malicious code in pb-digital (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 399c96f79b4c7c55dd2c9b4ac41c7fa11d3d1cbf26fcc0e1dbb1b222937711eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @raydium-utils-v5/fetch-wallet-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6767cf6fa4bd28e8f2921afd36fd888dc17d2fa9fa759e4d279464c8cc45a387 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47978 Malicious code in jito-proper-excutor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5397e87731c5d42672f0ac041fb0935695b96a2b12b83eae8c7407c247eb0f52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dompubsub/dompubsub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f03208a21f43efdf0471c0a1908c3a7229b8ebdd3572b58fe5921496b85902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raechaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9356d7106780c664ef4cc428fb0f72fc1165f196d819bb3a20fc0a86d648a0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47932 Malicious code in swagger-cli-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b8a1c500f2054b4cc2868df1b50c59128f47e0a132443910470547fbaf31bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ocp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7840fa3e2dfbea07d71767142edd939d438d07277cae8abc8dc00a497b3254f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47990 Malicious code in e2e-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9c8d68688f22fea09a5713fa230e86e17ec757b0ab4f80311cbc5312fd0cbf0 Any computer that has this package installed or running should be considered...

MAL-2025-47902 Malicious code in mockup-device-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d724d8a07d3f57cfb72aa477d20c02f9b470a7ce9bb8ce5e5cd2895cd50b15e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47903 Malicious code in mockup-plugin-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558235acfe4f70dc63b4fc13a84d52053efc759496cd14e3be1174f7ae4ee3df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockscout-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df96f7696839c4588380c2ac801ba26b9a18c28692bfcc3aaabf0e05edd9b8d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47879 Malicious code in affected-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d28082ed059e68e9aeb19f28b4d928db94d6f5392467f2fd362a468fd93bb6e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyflakes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93ff0092ec2fc5b39c7f60cc542b71de50d0e50b45087a370bc4b53064ac5a34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notificationalerts (npm)

The package notificationalerts was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c1205ef89ec9b8ec887a5a8e4d166be6421e33f4d61a691c4bd2e7000ee5c14 Any computer that has this package installed or running should be considered fully...

Malicious code in react-repack (npm)

The package react-repack was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 038fe89fdf3f2220fd47dd19c5464b9fcc0b3f60c5ad14ed468d2d1da9909de1 Any computer that has this package installed or running should be considered fully...

Malicious code in vite-next-logger (npm)

The package vite-next-logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b63f6a228b94e3b3c06e0d3e65937daa9e46eb2a5f95296fc24823796fab6fb3 Any computer that has this package installed or running should be considered fully...