MAL-2025-47920 Malicious code in @winstan/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b2d279a4e33191320b3f7c67ad6423715aae175d717f17581bacd8ccce41f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47919 Malicious code in @winstan/binston (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a456158c683cc4e3bd977ec81310c39b3cf491b14458ed49766c0f58805cec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48292 Malicious code in flight-suit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6d36537b116f54f862bfade62a56a5be6181faa17c245d41201c57b229ae4e Any computer that has this package installed or running should be considered...

MAL-2025-48290 Malicious code in @pcxm/gasket-single-spa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a9af818f322b10614f05f0798d081607acaf0edf591f3bc2ddd3fad0e4d3b10 Any computer that has this package installed or running should be considered...

Malicious code in vn-hrm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d7e7500ba0af4e9b2c0354a3820e7c28cc50ed3e9092db9e4c3c3cba3958234 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toskasldfjaldf-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e759a5c9e8da467a90adc10a682a68df15a878213a5e38a2a5dad06f95740103 Any computer that has this package installed or running should be considered...

Malicious code in vishu_transitive_fn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f90df0189636fa1988950e054ba609b79142c54a65e9cf18806db68cebf5d3 Any computer that has this package installed or running should be considered...

MAL-2025-48011 Malicious code in vishu_transitive_fn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f90df0189636fa1988950e054ba609b79142c54a65e9cf18806db68cebf5d3 Any computer that has this package installed or running should be considered...

Malicious code in metadata-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c93e5bf4059b5ffebc879cdbf901fc2a8508bf82f03b69abfd0ca6e9681aee8 Any computer that has this package installed or running should be considered...

MAL-2025-47999 Malicious code in metadata-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c93e5bf4059b5ffebc879cdbf901fc2a8508bf82f03b69abfd0ca6e9681aee8 Any computer that has this package installed or running should be considered...

MAL-2025-47904 Malicious code in react-device-mockup-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3997abd64511ef67ce5f8919344944698de3d8c04b73dee971d3ce6b3023493 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mockup-device-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d724d8a07d3f57cfb72aa477d20c02f9b470a7ce9bb8ce5e5cd2895cd50b15e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coder-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c2ddf9a60ebc68bffd364ac4fda53541ff6d6967a0fc5344e4d082f207aa27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helper-validator-identifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0951c3ea5fbcafe74c05ac02d253d369e25a8cb9904f448f047a9c8b38d693f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in importlib-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a22bec72f60bb7cc973586a56fe04d0278d14854c10f0e3ed7b88dc7dc556a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pkgutil-resolve-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355bf6f2e2ca64d826a7a85321bd48180e7683107611ff321101c5baf3b26e0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47894 Malicious code in pyrsistent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d4f455b5ff3e3d31b51da91ec02a2186696830d085f7eb5a58847724b15f040 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47879 Malicious code in affected-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d28082ed059e68e9aeb19f28b4d928db94d6f5392467f2fd362a468fd93bb6e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.2d.spriteshape (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5338704c6d9ca480f0ecc214b07912ff6b325612a7335034d750a40bdaf5c4b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47893 Malicious code in pyflakes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93ff0092ec2fc5b39c7f60cc542b71de50d0e50b45087a370bc4b53064ac5a34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...