Malicious code in tailwind-scrollmenu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 670918a6780c8dfd5085225b5db85733fee0cfde4128583ec1c4028d9168b2bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47470 Malicious code in oauthly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f51e9d4666c50bc7bc1a5f83811020d5da995fc251b9ec96a9ad3b8a3c6e2ecf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47262 Malicious code in @operato/shell (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ac476a02ea2559959f2fb9a0811fd56ee2380dfc7bd199f7731e350b5899ad Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47296 Malicious code in aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea6352db0bfc4f9d8a636697331c16dc4bdf6835770a024a1abb309c9dd9e90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47250 Malicious code in @openzeppelin-compact/compact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8318ee6c50491086374edce68740eb2b1f5827840f0dfd1d428881cfb50b4173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47265 Malicious code in @pumpfun-sdk/metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe74efc7770fd428add3639b89ec07606c3be7a22d6c185ef00ad4beb39b9c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47326 Malicious code in mcp-knowledge-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4724282166039be3118847ca134f1f7cabc4997246050c1b2a195ad521ed995 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47267 Malicious code in @rxnt/mobile-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673ac0ddb5ed6ce96a6263670496eea6e0d30cdc83d11c2de776a84b4b605635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-drawer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 654a91a470f375a9cb4e947721e019c839d4da439a16ad0308c6d183ada0bb55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nativescript-community/ui-material-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4102ccea0c14992d0974fb6022f1fff84012fc5ccb94c235452a1abc75a6f90c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nstudio/angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c1b0ff1d36db43c5565d468f0ca83363bf446a3c5b645dcc6f125bcff4c65b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-req-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05b36301096608673130a0c0ca70710e71d19aa1f1b849b330ad9cc03911fcbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47008 Malicious code in @js-to-lua/lua-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddfe717b22bb57e4e1887887c45646abfa625e1d566049a635b86193170cdf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3552cfd630fb30cd112a4c9ff8987f36a6de0941482cd2cb33abc0f7c43819c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47086 Malicious code in service-config-endpoint-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0879016c96750d8d2a0320e43955954e5f07cd7685cd65103101b1b9d3c3d7e5 Any computer that has this package installed or running should be considered...

Malicious code in has-ansi (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a7c0276dba3d39617d4cc7e1fdb42b46ca93ca1617825b962fc557c242ea516 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in mathy-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40181e61c8885579610a7982c1d9bb6de781022905e9b58618fd8206ba45347b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in server_msg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c915f51661674b9cbfd2e897a3d15c0682ceb1ddd99b4b6b70e3d9eee48f1c3 Any computer that has this package installed or running should be considered...

Malicious code in nodejs-backpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb99e7712a778eec132a6648afa1e407630ce06d816611aade3e1e1986562f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nf-cons-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e638446c9e65c64ab2f4781b57b182ae1de4c1da746270215e07e09992fc954e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...