MAL-2025-47925 Malicious code in file-uploading-advance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24a99ddaa80c4d726f189f11309cdab74b4343f1e567ec3c5fd01fcd9832b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47934 Malicious code in vite-tsconfig-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 867785f3a2ce4c75f70bdfe547c34b8c96ae89125ef2ee3b37835f5b752c36c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in file-uploading-advance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a24a99ddaa80c4d726f189f11309cdab74b4343f1e567ec3c5fd01fcd9832b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcp-server-fixthis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4109cd9a0c196b277a25ff70ae8b8a81ee61aaac82c1d77bbb4e743496508e03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ocp-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7840fa3e2dfbea07d71767142edd939d438d07277cae8abc8dc00a497b3254f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dotevn/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd413fbd590c7cda815f04e1334a602b11a45675da1dc8584e3ba025676c0532 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47914 Malicious code in @dotevn/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd413fbd590c7cda815f04e1334a602b11a45675da1dc8584e3ba025676c0532 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hash-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be7ccca438d061fd1d98fb1061421f517bccb37ba164e017caf7b8f8db366e2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bs58-utils/wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c802bc1898c7a60b65bc2c2b2ce4d2c52bb29a73f0b93faa7c4e6e60998d32cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47915 Malicious code in @dotevn/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b95b9f994dbbf3a9562b73fb2a0445eb341e9e8defdf89f43a90a3398270759d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47917 Malicious code in @hex-validator/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25655f70d79110f8ebcab9a8760766907a283e49147ebd961e97b0009418cc1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47918 Malicious code in @prompt-sync/v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f492139591d0edfd6e53adcf9ccf22ee8ef41d709bd21fd904acb9c9f66f59ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47933 Malicious code in vite-plugin-chunk-chop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0a281ba5e607e5e0a1ec33d95c6f94c54c8b9e04bb37df988126453585d7a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47922 Malicious code in cryptodotjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1cfa09b618dc51e1ed65556120fb823276eaaaa7a3e75a2c684da978cd11842 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-paysafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeeeb3008c1c25d409de0b1ddd06dec1567d3ddb75c311c718aeafd606e5f24f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zdachboostv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a28b54d5dff3b50a82a5cc25b9e54f948719b8e1fadb9701d3f96b02a5e843d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47921 Malicious code in @winstan/vinston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 701c8532f7235adb3a68d19af65d9a7b583be566885ae32b443bb5789e58ec84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in winston-logger-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a5c4b995fe69e4aa74c03000fd07f0d610f634bc937efe85b509242671234eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @winstan/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b2d279a4e33191320b3f7c67ad6423715aae175d717f17581bacd8ccce41f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...