MAL-2025-48030 Malicious code in langflow-api-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0d493794349f9fd072b31947424562afcd5b86b1fd642a42cf613d4b363f5cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48025 Malicious code in cf-editor-generate-variation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14a62fbb55d001821340d17e46fdfe593c097f0b4b31d4df41c3a4f72a2b81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview astra-db-recommendations-starter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious code in rails-html-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6639c0a00dd79a8b017f59289f23eccd33625402399ac79c43d96fdb92e3b373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48082 Malicious code in storefront-search-as-you-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48021 Malicious code in actionmailbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6163cee75f6b07eafd1b574563ddd85a557f61bd171d49c511515a16ce8b4db3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in actionmailbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6163cee75f6b07eafd1b574563ddd85a557f61bd171d49c511515a16ce8b4db3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in concurrent-ruby (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a9a44087853b6fa03aa9a4f09e51ff827a6d90b6fe4da7c38cc6ef2764ad99d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48040 Malicious code in rails-html-sanitizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6639c0a00dd79a8b017f59289f23eccd33625402399ac79c43d96fdb92e3b373 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyjwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1303df275ef90069cbd133d9486d1bd0732a401442c275a2c1ca4765fa940d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48036 Malicious code in pyjwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1303df275ef90069cbd133d9486d1bd0732a401442c275a2c1ca4765fa940d5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48037 Malicious code in python-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bf133022adafc8949f152dac2e99730580ca64a570cf0aeae36b7f81f3c1db9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48018 Malicious code in zero-slot-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e159cc709d3420c86d6676e754cc1f57818b21ccb863dba4d357ab6476c315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-opticompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2944281b796b865693c16f2bb84aa5a7e7060d92c19fe89079b20f7f4c63ba70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48017 Malicious code in vite-plugin-opticompress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2944281b796b865693c16f2bb84aa5a7e7060d92c19fe89079b20f7f4c63ba70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in async-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 219d4f4b2ee4a3b5ad9499a019b0f6ce848b7ae5bdc38e72e6c68c24b2ba3c77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48014 Malicious code in async-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 219d4f4b2ee4a3b5ad9499a019b0f6ce848b7ae5bdc38e72e6c68c24b2ba3c77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48016 Malicious code in testcatplzignore2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a8b1d8bd766d3c76c7e4ebb5e2f9226c1b7ae4cfe0c8ffcfd41ec2ad8916520 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-app-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48347 Malicious code in simple-app-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12841bf7b69cb4d4bbfe8fe7d87b976164b92187dae534f07331b5025779b542 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...