MAL-2025-48219 Malicious code in redirect-t8kcsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d48bdc09f7a339317e5e1351a51269a2f92801fc1e6c5fa906b2bfafbb23925f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-xs13nr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1049bdaa947906b364017bb13767c04598a526833d572bdc908840a74996a93d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48096 Malicious code in @testcarrot/supply10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be0caf56c8bfb459fe5af9909f2c71799d54ea1571de12424e205edd9e37c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be0caf56c8bfb459fe5af9909f2c71799d54ea1571de12424e205edd9e37c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c554af87914a43458082a747e4709d285f86a900c2c36e1f9d548a0281608e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e1f69fb6202f5542f7e1a2def95407b079bad5dd22d4ef58c3f243c794000d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1879de03e36cf280adcff93d8fbfe8537bb68de7e372b70c0e6b80adbdfe21bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48101 Malicious code in @testcarrot/supply6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1879de03e36cf280adcff93d8fbfe8537bb68de7e372b70c0e6b80adbdfe21bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62090c615c296faaa4c5b5daeca903ff5f30ce22e263e583ed7b697159fb17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48103 Malicious code in @testcarrot/supply8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62090c615c296faaa4c5b5daeca903ff5f30ce22e263e583ed7b697159fb17dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f18175c030df85202e86f90a2f44bcc72e87ad7ebf6cfd7e053c30fb7d76664 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @testcarrot/supply6 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in @testcarrot/supply9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e64b8769946e17d6a9951cd96ba45d155e96154c402b9afd04bfac0734c7f0cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48099 Malicious code in @testcarrot/supply4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c554af87914a43458082a747e4709d285f86a900c2c36e1f9d548a0281608e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @testcarrot/supply3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbc24cc97adb2847161caf543bbb337374513e26dd4d6d2c83b6d306df7f45d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48095 Malicious code in @testcarrot/supply1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 517d985985f415a1c4c91f10bdfc1757c72f7331c1f00d61ef96d902603783e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48097 Malicious code in @testcarrot/supply2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c6b1ac7e0d732e96fb12ebfc09964c4e8a5a58fb8b0a2dc11dab3fad6c78359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48094 Malicious code in @testcarrot/supply (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27e1f69fb6202f5542f7e1a2def95407b079bad5dd22d4ef58c3f243c794000d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-l6qi9e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea7c9759afb33de9be7fc7e051d5e7c5b3f74868b9887fec3b2e4d7b892d3fa2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redirect-0g91q6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb8a046d11d2d32600e11bc37ddbb705107cd33d2206e402b33572441677da95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...