Malicious code in example-vue2-micro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cda06e9583d6e3b61afb6f1134f4d867559022d5844de0fbb5781312b8d5abc The package example-vue2-micro was found to contain malicious code. Source: ghsa-malware...

MAL-2025-50730 Malicious code in synqroomkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914da44da2183d035b344098fd0e5fe8c942b80666fa3cbcf855efc2b2239faf The package synqroomkit was found to contain malicious code. Source: ghsa-malware 55bfdc58beccccc6ae0646990cdc186d46c910ef90f5abdcf0c6e4d1d8b52024 An...

Malicious code in lavanew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 574195b256d07782673f23ff2e7163f26dc2cadd4dafaf8ace366f77130bf4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47502de1954b1ba4d201ac64813edf79362d7f81fb2c28f6802f800d93bc08d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-39718

An improper input validation vulnerability that allows a low-privileged user to remotely remove files on the system with permissions equivalent to those of the service account...

Malicious code in crypt-osj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866ab4f1ee9ce8e2e4d4737ae37177fe6a206cc888d00e8d9b3af8e323434910 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fzsknvyeqakgmuip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03731ee46211f771ec6d0f0bd28ff0f685025cb4f661a544cd772d6516632ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitui-comp-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 006156deee84da1f8ec4b6c671c048f4204524d86e9aa7bdf1d5f8fc5dd8b7b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...