MAL-2025-49069 Malicious code in xo-shipping-change (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 194261ca5ce11a3a819c4aa938f33cd04d1089a614c0e1a224229efae8fc0edd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49074 Malicious code in xo-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99bf711c41656a6263989c743ebb667fca6ffbe7e749e7bacb698540cea9ffd9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49072 Malicious code in xo-third-party-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8be28c49d694fc1f5050cb2878693f651e4fd877c7c3e0ea83d08cf9a28cb5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49075 Malicious code in xo-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58815a099f64599f6c8c7778c42dc78094abeace3c685c538fe1ee5604b86818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49068 Malicious code in xo-login-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fcdb01161dd908ab60a75665ae19aceaa087fe291da7b8be7c5a7eb44b00011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49047 Malicious code in transform-es2015-modules-commonjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2ad9d3d189297373f163d4e6bba02fc712b67f335bc6a6bab2ebfcf16cba487 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49037 Malicious code in react-naming-convention (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f1de3b293c216a9b6c48e3cdb120f41ef3a161e4aaa7be1aa115440108c0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-naming-convention (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f1de3b293c216a9b6c48e3cdb120f41ef3a161e4aaa7be1aa115440108c0f4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49019 Malicious code in lion-based-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 693093745f698642f6910dfb2c66eaffd55d5d16d4b5bf13a71324e305f4f460 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in artifactregistry-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd347194b3db170de6eee9d04102cfda66c40fb1276cc13c04cbdb81db0b33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lion-based-ui-labs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402aef950dd8db7a0a6a3a29bf2658df3695836e4ccd542400e331b1b34e5a28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48985 Malicious code in artifactregistry-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd347194b3db170de6eee9d04102cfda66c40fb1276cc13c04cbdb81db0b33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49042 Malicious code in sort-class-members (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86c2b9c84144bd26b1c4abd4d6fb5b71a8f4aa1937912d8262778b0bbaec58ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49064 Malicious code in vuejs-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a06ba3db5dc9f82ea682ce485a98f9fe76e64ba482445a08306e872524603f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sort-class-members (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86c2b9c84144bd26b1c4abd4d6fb5b71a8f4aa1937912d8262778b0bbaec58ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in syntax-dynamic-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fec79d7a70cef5393761c1bf6598e27804e363c0873d62590fe06b49d3bfc4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49046 Malicious code in syntax-dynamic-import (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fec79d7a70cef5393761c1bf6598e27804e363c0873d62590fe06b49d3bfc4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-disable-next-line (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c260c70270e5f716b6e8197913327633d64aa0ee2e18ebde88c8f53f06893c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cccaba4bd0c7417f30999db8ce705201039794a8ad09804f33dd1fdbe088a8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...