Malicious code in internallib_v102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64f2492a409422fc476a0aa1d4628143e50484abd7ba7cb747535849ddebc805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47145 Malicious code in @huobi-lib/vulcan-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19abe7ab9afcd189bbbd5061add8629d1f576b8dae3944cc7974b7581ffbd570 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lovable-cookies-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2866fddcd00a7e51784a043c672960b21264ee2449d71b72d5382f7ab14050b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in middleware-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 572eeb4389dd6da0c13648478c40f302f15e7736279e3b33d171a315a2cac60d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslints-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b662ef08a1f7e1997586aa84a90068921137be8ec4c4c82df2ba5c5318ad3202 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-node-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43e3bae1d6be9bca527622368d2a291d97b40692ce8996525eefb78917c7e0de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-configs-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee3c791a92600ef66a7c4165e740bfeda8da8dad109a35e6db271d6fe07caf7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mse-eme-capabilities.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35ba0710a5c55a2abfbe4d0332047feccf4ef80e6d7d98203473d6eec8bd1d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47190 Malicious code in mse-eme-capabilities.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35ba0710a5c55a2abfbe4d0332047feccf4ef80e6d7d98203473d6eec8bd1d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26f59edc4a049e09b7c58781c9ec1b0e28038561905195af89d655fedcd5b14a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-uni-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ff6cfac329bcb3bc726e87d12942ec29cd686c4d4e81223398ed26948b46e39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graphchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f74a555cfba6dedc51a937d8cf8c843437538581dea703284d1e872317263f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in func-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 183bee92d103b0ab1b31800264af1d8c52406e47e7474caee592609e736c1f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47095 Malicious code in func-analysis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 183bee92d103b0ab1b31800264af1d8c52406e47e7474caee592609e736c1f1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47103 Malicious code in snapshot-vks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e927fc13301b02ce43be0a04b2937f258104c6daae954507111b28a5cb67a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-dropzone-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfc9e996c0ff6970713abc0d1870a3982db5ed09547644a140c8160a8a393d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47104 Malicious code in tailwind-classname-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778af8e6403754b5650e5c08f6d16458ed8399f7cb2886350369e04ac242e07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mongose-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1880a71882771a0b6b447fc3c6c5990ae665d189d01f143b84684d99c0015a63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47078 Malicious code in mongose-ci (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1880a71882771a0b6b447fc3c6c5990ae665d189d01f143b84684d99c0015a63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview lovable-ci is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...