MAL-2025-4383 Malicious code in osd_tp_custom_visualizations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d16134ca9360338b64d409af1360dcac89afe4082ec98215311fddc6d59bae1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4359 Malicious code in hideoutpd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05755ffa640417a2738dc322d54a0dd1ddfca66b9b14d26132c60783ba4822b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3662 Malicious code in @gfgtech/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84be24a70b7b194bd9b506eb47c9e8b14d609c4dacff0fe05c46440b18ebcc58 Any computer that has this package installed or running should be considered...

MAL-2025-3548 Malicious code in cxo-storyboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52b7107790e92d1adcdda6e4a16e6496f43bd80329629721bd96a0e03591c4f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3556 Malicious code in passports-twitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ed2e22762097011eaacc32402595cb2ee0cc37014af41523745f7fd75f14f32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3260 Malicious code in kernelcon-bad-packagexp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b23dcd407de61faa602b2eaaa097be5383c16cc1c62b28c707bd050dd46a1720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in moment-encryption (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff1ffe845cd41861606d3dc20d843dbe68a99b2db1e87c2e012b8a804a78c494 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3122 Malicious code in tiktok_4d_webapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7b2f7d0a2a643de495f8b050981233231b51ed49c2dabb3e2de7b908b9fa7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3057 Malicious code in @hongfangze/verify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d21967c00c2a461014b34e6cbbda87d6aaa78c3058709e4b02f3125db3da56dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3059 Malicious code in @nationalgeographicsociety/ngsui-core-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c79788b32fb541eecf3d0b0268cd2e201328ab9caf252358c1f9106c193acf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3026 Malicious code in yass_eal_abcdef_ssdsf_dsfsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9708c11d4bdfb0c8887d90f2cd1def69498544a363191b5f3ca7b3bbeff52b88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2735 Malicious code in crash-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80ddc752065839529322059bc8e3819805b3124a81dea81cfd0a905b9e8a4371 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2517 Malicious code in near-crossword (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1d0bfa084a2c49bd79b6bf04b30549426c23beb5a5c3feb7ace2146642b006e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2459 Malicious code in coral-typescript-types-pieces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb60f10931d0441dea23891c7327d9eb412332843af333b6b4d4f06da4e88563 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2095 Malicious code in bitget-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb95beffc6efb8662038329634e713d9210de5390298fe4811ebec827a9e2848 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lowerlatency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f700dd666f8c638ef80313c4c023741eb86e82499846ae16439704f2136ea28f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1629 Malicious code in tedrertrtrtst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf77e0f8793f6db3affddedfb08d60085dbbfad04ed2b0f20ef2cecf43ff283 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1436 Malicious code in pionex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 920e3da8486469505238abd948067c96de94fbd869e6732782e06809f4fd7902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1124 Malicious code in flow-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95e93dd23f522075c8f46757a65625424d8ca39a6ecf846cc72b5eef35225347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-157 Malicious code in air-dao (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddeda2a634c3018d1090755cab35377cb55a4f708bc18d0ac70f0999be80361c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...