Malicious code in @dotevn/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd413fbd590c7cda815f04e1334a602b11a45675da1dc8584e3ba025676c0532 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47914 Malicious code in @dotevn/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd413fbd590c7cda815f04e1334a602b11a45675da1dc8584e3ba025676c0532 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hash-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be7ccca438d061fd1d98fb1061421f517bccb37ba164e017caf7b8f8db366e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47918 Malicious code in @prompt-sync/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f492139591d0edfd6e53adcf9ccf22ee8ef41d709bd21fd904acb9c9f66f59ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47917 Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bs58-utils/wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c802bc1898c7a60b65bc2c2b2ce4d2c52bb29a73f0b93faa7c4e6e60998d32cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47915 Malicious code in @dotevn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95b9f994dbbf3a9562b73fb2a0445eb341e9e8defdf89f43a90a3398270759d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47933 Malicious code in vite-plugin-chunk-chop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0a281ba5e607e5e0a1ec33d95c6f94c54c8b9e04bb37df988126453585d7a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47922 Malicious code in cryptodotjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cfa09b618dc51e1ed65556120fb823276eaaaa7a3e75a2c684da978cd11842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-paysafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeeeb3008c1c25d409de0b1ddd06dec1567d3ddb75c311c718aeafd606e5f24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zdachboostv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a28b54d5dff3b50a82a5cc25b9e54f948719b8e1fadb9701d3f96b02a5e843d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47921 Malicious code in @winstan/vinston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 701c8532f7235adb3a68d19af65d9a7b583be566885ae32b443bb5789e58ec84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @winstan/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b2d279a4e33191320b3f7c67ad6423715aae175d717f17581bacd8ccce41f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winston-logger-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a5c4b995fe69e4aa74c03000fd07f0d610f634bc937efe85b509242671234eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47920 Malicious code in @winstan/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b2d279a4e33191320b3f7c67ad6423715aae175d717f17581bacd8ccce41f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47919 Malicious code in @winstan/binston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a456158c683cc4e3bd977ec81310c39b3cf491b14458ed49766c0f58805cec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48292 Malicious code in flight-suit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6d36537b116f54f862bfade62a56a5be6181faa17c245d41201c57b229ae4e Any computer that has this package installed or running should be considered...

MAL-2025-48290 Malicious code in @pcxm/gasket-single-spa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...

Malicious code in vn-hrm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7e7500ba0af4e9b2c0354a3820e7c28cc50ed3e9092db9e4c3c3cba3958234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...