MAL-2025-190663 Malicious code in @asyncapi/optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886928a124b656faf40d1490a3b484cf0aa717d98fa9f5cd6de025e1874183e5 The package @asyncapi/optimizer was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190691 Malicious code in @zapier/secret-scrubber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c109e973086267fe5b99a110c559267a26254a0bb87dcffbaf3fb69ea4bbca75 The package @zapier/secret-scrubber was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191164 Malicious code in JScearcy.rust-doc-viewer (VSCode:https://open-vsx.org)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 1dbdd73bf66fbfde48d73e86ebfbb11ca8bb6f44ff57a5030596fc189f962ddf This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency...

MAL-2025-191166 Malicious code in l-igh-t.vscode-theme-seti-folder (VSCode:https://open-vsx.org)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security dc07b5a9c4c6f86929db6d62c15f2c2a9c52912263950282c709e0b68387f54b This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency...

MAL-2025-191157 Malicious code in cline-ai-main.cline-ai-agent (VSCode)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 04aeefbf39e1e9157280b91899a141e4f4c6619d434c594e4a2d3bf43883dbe6 This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency...

MAL-2025-47450 Malicious code in hello-shai (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 297f2a57d1c225e18d8464c2024daef4567955be0eb8cd8d45052aa778fb4f3a This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub...

Malicious code in hello-shai (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 297f2a57d1c225e18d8464c2024daef4567955be0eb8cd8d45052aa778fb4f3a This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and publishes them to GitHub...

Malicious code in devextreme-rpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f74fc68752b93858b4cd802b0c1c9c940779258a08c206b0787ebf5b94bc9738 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @operato/help (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f6886d19c6aa1c28eb93f17ecfde91dc47019cdc7663a5dcbeba05d551c7315 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in jumpgate (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97bb9f6eba8030517cfb22f10da2b5f5d7b4c04faa1168e2fb713c030b3f7b95 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47248 Malicious code in @nexe/eslint-config (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28bbd639d7b6ddb2e3b98381bed2e182466ef9c99625b1e1c398cc37ee43f49a Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @tnf-dev/core (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf7e915935b9386ae9055f6a67642dd5c340cc47ad0482d8fa62dccb595968cf Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @art-ws/common (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a490c632daaee5b64f871466f63aae92473f9d088ce9c7d1c40cf9a7de5de0d3 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47305 Malicious code in devextreme-angular-rpk (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48daa4ee53933f4f74c8a6cd7644ad441f316912aa3e282498fe602b91f2bc40 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47331 Malicious code in mstate-react (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997c10662d47fa55ca8cd4db612274bf4d589c7d82d079b48fae3261bb5c65a7 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47288 Malicious code in @tnf-dev/react (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4d6867e6189f0175e6f56e18ff4291470344b5f188c83b62ca56759287e142 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/cqrs (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c115992eefc51ff69abc88f9b1b99c8934c1d03e4a724bdb430fa22e942a45ab Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/demo (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d07b84a8fad4cf98766b909452076e1349e19abe6fa8b41b3a2d3326650fb05 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @hestjs/logger (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5b44b7c89eda3e220301eeba947231de0ad075f98e11343d2a169df9341a6ce Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47381 Malicious code in @art-ws/package-base (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ba9ddbeaff9ca9f10da444f6eebc52dd7ffa99def6e187eab42dac24a4d7de Any computer that has this package installed or running should be considered fully compromised. All...