MAL-2025-48103 Malicious code in @testcarrot/supply8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62090c615c296faaa4c5b5daeca903ff5f30ce22e263e583ed7b697159fb17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48048 Malicious code in redirect-7vw41m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e2ff7b41b210d052c6bf0d4bbf06bacc41931093d686c3b97bd56cc2034c860 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-4iyfat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 308da4bae6f06eca09a47a9ffea24c1ed5afd9ce25ccb18c266d797c1f29e360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48047 Malicious code in redirect-7bqfg6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cbe30cd65f2e9549fac6967014eb87d8c906c7a0801f82dab1d1de706c0e606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zero-slot-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e159cc709d3420c86d6676e754cc1f57818b21ccb863dba4d357ab6476c315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uniswappools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0b653b79b20ce2e2500a72394fe63b315bbd12824189928aac357539ea2166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47998 Malicious code in mapbox-gl-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d036b317c8c49cc8982dedb6417e57b1669e9dfc07159bf4a7e6fb136ff939c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in qweqweqwexxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb4579b71df57bf70c32bdf8375874927db8256e0dbeb573b748d12439bbe26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rechxartas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5cb88de7667d98496b7bf14bd3ced3b4e7f51a418eeab8e389ba0c15fbc9745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47957 Malicious code in oxrvxxxaslllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121764b98e89489abb502bcc35fb1b4cd7c34e64216932ba31a3b908a1e12a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oxrvlllcaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be796eae19919fbfc10cbeab99b4560961dd085f2b2d887e64fd81bfaf7f5bbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solarpeng1234 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90f041841d26ae1bcb4d5908b14cc0665e231e04bd5b75967aba62b6d80e13da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47938 Malicious code in solarpeng123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82abafd54fec90c9d7c9a4ae67d1236cca9c5d03fc30eea07ee7a6606d66cce4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swagger-cli-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b8a1c500f2054b4cc2868df1b50c59128f47e0a132443910470547fbaf31bfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47930 Malicious code in my-ttt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e183b31e3dfa7feb3d5dcb77d854dc97a37725947d01080753df10123c5ece3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vishu_transitive_fn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f90df0189636fa1988950e054ba609b79142c54a65e9cf18806db68cebf5d3 Any computer that has this package installed or running should be considered...

EUVD-2025-31653

Malicious code in bioql PyPI...

Malicious code in @sev-ui-verse/providers (npm)

The package @sev-ui-verse/providers was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27efd3b5904168e110748f7dc2e817324614b5711aae935b5bfacdafe8364830 Any computer that has this package installed or running should be considered ful...

Malicious code in internallib_v714 (npm)

The package internallibv714 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949e0eb9d0a4f2ce9f9738485e24ab728066c412cd31cbc7445910a5e2709571 Any computer that has this package installed or running should be considered fully...

Malicious code in dowload_ebok_see_how_they_lie_by_sue_wallman_7f3za (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fa49dec8d439a9b9749b02cc494c69fbc1a39a7aa95be72aff02ef85608c978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...