MAL-2025-47938 Malicious code in solarpeng123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82abafd54fec90c9d7c9a4ae67d1236cca9c5d03fc30eea07ee7a6606d66cce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swagger-cli-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b8a1c500f2054b4cc2868df1b50c59128f47e0a132443910470547fbaf31bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47930 Malicious code in my-ttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e183b31e3dfa7feb3d5dcb77d854dc97a37725947d01080753df10123c5ece3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vishu_transitive_fn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f90df0189636fa1988950e054ba609b79142c54a65e9cf18806db68cebf5d3 Any computer that has this package installed or running should be considered...

EUVD-2025-31653

Malicious code in bioql PyPI...

Malicious code in @sev-ui-verse/providers (npm)

The package @sev-ui-verse/providers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27efd3b5904168e110748f7dc2e817324614b5711aae935b5bfacdafe8364830 Any computer that has this package installed or running should be considered ful...

Malicious code in internallib_v714 (npm)

The package internallibv714 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949e0eb9d0a4f2ce9f9738485e24ab728066c412cd31cbc7445910a5e2709571 Any computer that has this package installed or running should be considered fully...

Malicious code in dowload_ebok_see_how_they_lie_by_sue_wallman_7f3za (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fa49dec8d439a9b9749b02cc494c69fbc1a39a7aa95be72aff02ef85608c978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-scrollmenu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 670918a6780c8dfd5085225b5db85733fee0cfde4128583ec1c4028d9168b2bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47470 Malicious code in oauthly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e9d4666c50bc7bc1a5f83811020d5da995fc251b9ec96a9ad3b8a3c6e2ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47262 Malicious code in @operato/shell (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ac476a02ea2559959f2fb9a0811fd56ee2380dfc7bd199f7731e350b5899ad Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47296 Malicious code in aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea6352db0bfc4f9d8a636697331c16dc4bdf6835770a024a1abb309c9dd9e90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47250 Malicious code in @openzeppelin-compact/compact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8318ee6c50491086374edce68740eb2b1f5827840f0dfd1d428881cfb50b4173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47265 Malicious code in @pumpfun-sdk/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe74efc7770fd428add3639b89ec07606c3be7a22d6c185ef00ad4beb39b9c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47326 Malicious code in mcp-knowledge-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4724282166039be3118847ca134f1f7cabc4997246050c1b2a195ad521ed995 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47267 Malicious code in @rxnt/mobile-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673ac0ddb5ed6ce96a6263670496eea6e0d30cdc83d11c2de776a84b4b605635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-drawer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654a91a470f375a9cb4e947721e019c839d4da439a16ad0308c6d183ada0bb55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-material-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4102ccea0c14992d0974fb6022f1fff84012fc5ccb94c235452a1abc75a6f90c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nstudio/angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c1b0ff1d36db43c5565d468f0ca83363bf446a3c5b645dcc6f125bcff4c65b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-req-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b36301096608673130a0c0ca70710e71d19aa1f1b849b330ad9cc03911fcbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...