Malicious code in config-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca038d2292d65fcd63e01c65289a778b680b4d88ac8f282cc3bcd15d496497f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0074aa23419396ed1a9fe8acbdb9bac05d585129e3723d4db8a9af9f457096c6 Any computer that has this package installed or running should be considered...

MAL-2025-6113 Malicious code in one-fixed-dep-bins (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d275fc55fd1295739e28fef0ec616a970ad488e3ccc4fcb183fd48d8494815e Any computer that has this package installed or running should be considered...

Malicious code in yarn-test-git-repo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edc9cafea25a24afd9f19a9a4ba2af18e06bd436e07baa0c8cb4250ab522228c Any computer that has this package installed or running should be considered...

Malicious code in privmx-crypto (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 588af33eb2e6f5ec7452d71856c5f1c602724084bbae3765549330176f59eaeb Any computer that has this package installed or running should be considered...

Malicious code in sol-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f54238c3d0c543a0c99cd8dbe4ffee1a2ffe0ca8230dbd0c7a8f521259f38339 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodemailer-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92fcb8bbe96410119e865394273d8185c940c7b31957a92fa23e23c4e893ea8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rtp-rapyd (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0a521f8592c35bef558ae1fd9a4f584f1365784b6f3254816e6db8f4592e453 Any computer that has this package installed or running should be considered...

Malicious code in dex-sample-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5833f372bb58f2c3d63ada7d769c410b4464de4c9a0084d3e8f8ecbee863f4f Any computer that has this package installed or running should be considered...

Malicious code in @jssrv/template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce87403bb05aae59ca8877b014a3a8255b54b2a22e930687649c675cc9602f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @secsol5g/qlik-sense (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e6e893d70e9cadaa903bd52251f94e0ad33fa06117a157e4fe4fe513a8224f1 Any computer that has this package installed or running should be considered...

Malicious code in lunasec (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ffe1d0846a694f3b7e75d9064515e2cb7a42074ea0b54d8077d5bdb0cf3993 Any computer that has this package installed or running should be considered...

Malicious code in router-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79988cd859092569021535b2a0ed329cc589611cb68ee789a342c0a1b0945e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gdcorp-commerce/cx-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28edf91ea21172ce7f3ff12d49071830bd423ed825a3b22b8e7228e1091cff42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gdcorp-commerce/cx-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce80126682f56a0068ac541d5304235859cbf407b6945eee895e676fb186858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gdcorp-commerce/cx-api-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 968087e3c7d66519a171ae24c3ff7965c24df722ea4b818bde5d1045acaba4ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gdstudio/web-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c2d2be9daa1f2aeccfe95af90300246eb3665a5675beeb7193abacde6d16cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @forge-ui-components/media-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3352739bbbfe79ebecd02fae7c7026cc29a1c947649126c59f096d8cd4bbd02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ecommerce-cart-ui/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac1b682b09340a43e74619f9ac55f2be98bfb14eb37a21597fb9f81b46f4161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...