MAL-2025-48147 Malicious code in redirect-cuvccp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45100716d4ad002f1a6e8c6cde5c6f82e0b69ce9dcf848e37a123e187b8b263a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-41402

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 21.4R3 Juniper Networks Junos OS versions 22.2 before 22.2R3-S3 Description An Origin Validation Error exists in a file within Juniper Networks Junos OS on EX4600 Series and QFX5000 Series. An...

Malicious code in rechxaartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fc5d0a5a306249e1d1010a8dd5e2e8e90d41a0bda538921ad3e2cec981ab6bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sha256-validation-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d087a7f065c7d1c6612320e8fc3d19957b0768a27ea56d1c6849c32193941829 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EvilAI Operators Use AI-Generated Code and Fake Apps for Far-Reaching Attacks

Combining AI-generated code and social engineering, EvilAI operators are executing a rapidly expanding campaign, disguising their malware as legitimate applications to bypass security, steal credentials, and persistently compromise organizations worldwide...

Malicious code in what_type_of_self_indulgent_sub-par_challenge_is_this (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3aab675be401e5fe6766b12bc5278c932ac0e97db81223ce0a5b14870dbb558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d3ceb026e94d925a50747700634d96a0e709e7c3882dac41638f6578a9e7228 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in firefox-screenshots (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d3138a26b7ea5f91361ed825aad5e3dc068f6b6655b68dd357565767f5ed968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lmk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2038ad5438e131b27ac4909e8adaf2ed1ce6a0667a10b46ed02c33209e2708a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in your-published-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cffcefb87ba1dfcfc4089b98727de2186cb5179c69a0f7630c359ff62ba3546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kidding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ac1b9b208a68f6eb5fba2340ef58f1e62f83363b647916f6e5ac29be571f07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ilovingcats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bbf798857d246d05c268c052e1b394b82f9a62af9af62ff888c2ff03bb2d4f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in near-lake-raw-printer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e593a192910f4a7cb2542c2fb2974be98c92be795c5ab639f2d5b31f6e88e0fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sally-fn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d8f992872ff1926200839cd344c09dfc137f063e5f7e5f87f54d62b1d758202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spark-ar-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b006a03d3e32e686234cf99060872119413445632a4820ae7cee58e29c23841 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mp3-file-zip-d-ownload-push-the-sky-away-m86s1-rigirm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa43de94a064d8c602ce88408a0fab3a3c1d87c658eaa342cd9dff9c3fdb624b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ttuiooty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b275fd67a527aba9922dae957015a4e562bebb7e05e51f034b1ac179723b0ff0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/architecto-reprehenderit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e8dd0516a6c5552999774afc0e9a3789cb45e5888eb1648e3d7d92c8ae2db7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/itaque-nesciunt-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d20c232adf35eee773aba9024dfa9d48b92b227809834242b2f0c851270689f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-5604 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6963caefff4a061651d4c8afe98aa2ecad2483accb3ff5b65aef1fdecfba5ec0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...