MAL-2025-42138 Malicious code in mathy-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40181e61c8885579610a7982c1d9bb6de781022905e9b58618fd8206ba45347b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42140 Malicious code in tailwind-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a5127a22fb572ebcffe8d5b7a31ef0ceeedc9113e7e1666b1a23384f0ae3cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42139 Malicious code in tailwind-config-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ac45edafa6ddcf4af5c1970929875bc85e162994b1e4a7e3f607529e1425763 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-config-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ac45edafa6ddcf4af5c1970929875bc85e162994b1e4a7e3f607529e1425763 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nf-web-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9daed61da73f36e121e5335edee0f392a2a0f1ee89890f0589974f04ff0f1c9 Any computer that has this package installed or running should be considered...

Malicious code in library-website (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 152fbdb0c3259bb6ed24b96039f38d3db3bc716822511da408febc45fc2e93a6 Any computer that has this package installed or running should be considered...

Malicious code in document-metadata (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310a04e0fbc7e2ba328f1b392655733ca387093a2e627dfdcc6beec46521cd3a Any computer that has this package installed or running should be considered...

Malicious code in react-native-wm-weighingscale (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f52e44adf41110a245bb349fd32b3d12061d0548434843d6b2ee7c68e02f836 Any computer that has this package installed or running should be considered...

Malicious code in react-native-wm-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 790e08de4e57c51f573e613b7cdd780343c4f14a00aadaff30e05fca9cb69f8b Any computer that has this package installed or running should be considered...

Malicious code in react-native-httpapi (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 872a61b5247749d233711d5fe71d6da937fd301c6cfe4317b41b6f69f4566000 Any computer that has this package installed or running should be considered...

MAL-2025-42134 Malicious code in polyfliof92 (npm)

The package polyfliof92 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4387ae12209d330b510d4b61ae05eaed4bf1771880ccf8f8df83711e29b6a0e8 Any computer that has this package installed or running should be considered fully...

Malicious code in berachain-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44aebab0bbbd5111085070765f75cb2a7863bb8c97a276b96596f69a2062d10d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in server_msg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c915f51661674b9cbfd2e897a3d15c0682ceb1ddd99b4b6b70e3d9eee48f1c3 Any computer that has this package installed or running should be considered...

Malicious code in r00tsid1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a2b65c9a521b2e24624a926d31abeaf200289eb1c219761dc94f97e9c05fe56 Any computer that has this package installed or running should be considered...

MAL-2025-41271 Malicious code in apollo-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d475a426c61513aa519a888a0b2e6968223fdcf3b3ea86c39f8bd0777207c40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apollo-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d475a426c61513aa519a888a0b2e6968223fdcf3b3ea86c39f8bd0777207c40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb_helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd02d94679b40d95c81b651a29666a45452deabc83d8e33032104032eef13261 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @navancorp/fe-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85c47c473abe59dd1714ed889d2aba7ac40eb668ba9cb8bc5fcc0a11f33c69e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amp-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacbeb50af065a576ade73d084e6ac504cb061d33ebdb8fe8d72839b926e9d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...