MAL-2025-6290 Malicious code in kalitest11 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26193c08ed761df2176023996662e8905acb48a4b9404a0df12ad9d1570ba586 Any computer that has this package installed or running should be considered...

MAL-2025-6326 Malicious code in airbnb-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95d4769590720f8d81e75475b80c3296be47c39842667299fd68ebcbc22b24e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ids-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f020e163d0a577209cc845c050e3c05d1227f790c1e49a6ed7acc1e0d7efae4c Any computer that has this package installed or running should be considered...

Malicious code in tnet-dps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45ed1abbbf74a45b20d6fc72505538baf442bd7dc2879cf8958b815f12ccde79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6235 Malicious code in tnet-dps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45ed1abbbf74a45b20d6fc72505538baf442bd7dc2879cf8958b815f12ccde79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dpsdatahub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb97b44ee7e1364b992eae9dc31f497361866c14dada3334a4d21688978bb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6233 Malicious code in dpsdatahub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbb97b44ee7e1364b992eae9dc31f497361866c14dada3334a4d21688978bb0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodejs-backpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb99e7712a778eec132a6648afa1e407630ce06d816611aade3e1e1986562f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6287 Malicious code in headless-skia (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83bcceb835d149498bab1ac808c57632e42a51f4ee45c21cee8ab84b1ec14bb1 Any computer that has this package installed or running should be considered...

Malicious code in headless-skia (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83bcceb835d149498bab1ac808c57632e42a51f4ee45c21cee8ab84b1ec14bb1 Any computer that has this package installed or running should be considered...

Malicious code in swap-token-list-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff37669cef0c949bb0dd7b4eebab3d14891256532b09e265c1a486fb2ca0996c Any computer that has this package installed or running should be considered...

Malicious code in db-connections-templates (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21f6e4f8c7542ce167e02d0a5da417230f30a924d39fff85b921a65f07baa938 Any computer that has this package installed or running should be considered...

Malicious code in mini-builder (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c41b8a00db37ce8a635ead3b85abe8e193f7281d259c2f0b275747924aa8648 Any computer that has this package installed or running should be considered...

MAL-2025-6294 Malicious code in mini-builder (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c41b8a00db37ce8a635ead3b85abe8e193f7281d259c2f0b275747924aa8648 Any computer that has this package installed or running should be considered...

Malicious code in nonexistentgibberish (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b9dd1765a9029e224c537d8a52266bd425b43b63409e96f9d07755edf7ce3d7 Any computer that has this package installed or running should be considered...

Malicious code in bingo-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96e6e47500342e1cad70444862565ee48be2e2fc9f3d0e7dd92d8e8c662a231 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-international-phone-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55dc391aa3ec3a479f332033f4ed1c9804c98935cd8ec931e830a8f44a9b790f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6218 Malicious code in durilka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30237df1aa52d87c76f60c6ff031ed2283d3324ceb3a3d2aee7fb3a7d5788c1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in svelte-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4125174a3a5dd31d226347f4233e451beb406573ff2e254d5b9b6289f52ff3af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mv-fe-scss (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c1a1d9e0905804668e279f144472abeac638dc18ec3c4cdf519de71d9ddbe73 Any computer that has this package installed or running should be considered...