MAL-2025-47002 Malicious code in @i22/rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47748ea5218b5ee35bfc50b911a7a41d04d1e19a74832b73679c1c376133dc79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47003 Malicious code in @i22/scroll-animation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1297ada7ed50f62fa70a5afda0a5f25b8e52d052e53dc69c23b9927d6024c15f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @amazon-bedrock-agents-healthcare-lifesciences/docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecf7f917126f8a71d26227e7f55cdabe99eed6831cb23345e4045192f6a36446 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47006 Malicious code in @js-to-lua/handler-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbb26f98b0d1520a3801861e0c434568d5ac1958606124e217a6e10eda3c436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in filigren-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b84001265dc640f83d6ea3e8dd5ac422aeb96be876ac2b9c9482b846b5d735b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47016 Malicious code in filigren-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b84001265dc640f83d6ea3e8dd5ac422aeb96be876ac2b9c9482b846b5d735b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47015 Malicious code in checking-ips (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 941a9d77f27a5cf03000409003dc26dc454bbdfe54ff4e4bdcd72c5184e45263 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xml-request-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f1d42d43604327ee124527dd04dcb37f13b0d2c46a4f2dc3e3764c7b2000bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in netflix-dea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b29496c035b21772b6474b4da2740f75b84c0dfeb189436edf4f9134c6730b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-with-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b89eccbd26574ef7afdd79f2a415ff32ea562f29d8e293207973cd1cc50309d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3552cfd630fb30cd112a4c9ff8987f36a6de0941482cd2cb33abc0f7c43819c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47012 Malicious code in airbnb-with-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b89eccbd26574ef7afdd79f2a415ff32ea562f29d8e293207973cd1cc50309d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47014 Malicious code in braintree-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 053257b915c2f0af69829fe05f32c4248f8dd415cf1a12103f297d5fbfe0574e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47020 Malicious code in netflix-dea (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b29496c035b21772b6474b4da2740f75b84c0dfeb189436edf4f9134c6730b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rushstack-lockfile-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ab388958610beed90f3054ac980a3e187917b93ec99f6f75cbeeff5c3f5dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47021 Malicious code in rushstack-lockfile-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ab388958610beed90f3054ac980a3e187917b93ec99f6f75cbeeff5c3f5dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47017 Malicious code in image_classification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e5c05f2c70291fde5a4ace56b3aa015c8c407695c02395a9a4336285e964a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in image_classification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e5c05f2c70291fde5a4ace56b3aa015c8c407695c02395a9a4336285e964a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @magda/semantic-indexer-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b70c247fbc09223610616ef9c39ce27218404bff50de29b8a28706679fc14 @magda/semantic-indexer-sdk ships a minified dist/index.js bundle for a Magda semantic-indexer SDK. Static keyword patterns fired on the co-occurrenc...

MAL-2025-46996 Malicious code in marvelapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 205dd1f70bd63ef50607d6bdc7c8c01a115daa06c201dd16fdfe0ce947719833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...