MAL-2025-5959 Malicious code in tailwind-base-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8582e0acc5f7199f1f7af95aaad0689d758cd9b4cd7110c3d2291ff6751eb5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwind-config-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6be9b05ac20a95e479566e244cf4bea92aa77281b365a4deea26727c50e08597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5960 Malicious code in tailwind-config-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6be9b05ac20a95e479566e244cf4bea92aa77281b365a4deea26727c50e08597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5968 Malicious code in vite-proc-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 097cf8f610d9121155696133687f0e50aa33c0716a29bb7fb0ebca8254f84e09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5904 Malicious code in cronek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40882216044b32c8d0c784324cbcdba8506356224d05c60cb2a80d8823664e40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-log-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae891068161d7e6889e4a12faa8fad3699025e42e4ed3f317e50f0506d517a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in proc-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3789e8e4aa2cd220d264340ceccd11c9e9e8b6d5e35c4ad402303a54500a105c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5949 Malicious code in proc-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3789e8e4aa2cd220d264340ceccd11c9e9e8b6d5e35c4ad402303a54500a105c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flowframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26594c7af803e5fdd685615007a51b104640aedcb8c6658ba144125358c38fdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5914 Malicious code in flowframe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26594c7af803e5fdd685615007a51b104640aedcb8c6658ba144125358c38fdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecom-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 521b798d9b0e0109ef6b2642feb49a1c930d97adfa05279b55646931ce1e6352 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-usageit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b967c2b3def62623ccbff0e7e878a7e995fe0dd101b98430c3d1f875cd4729c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pretty-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d026c38e3bb7cb5b1d371ac307d4728cbb8ded9508cb84340eed05baf1666948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a86cf25e81b6e1f513cf67782d9ef778fe14ad1eba93f4a28adb2c1f63bfa965 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5967 Malicious code in vite-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a86cf25e81b6e1f513cf67782d9ef778fe14ad1eba93f4a28adb2c1f63bfa965 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5951 Malicious code in querypilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c3898e80b9dd4a417ddf444390b2d4adef6f4ac18a5f2e63f2d25defde9db27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sentry-bundler-plugin-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8f46a47bc2b07ff75d14f1b6152b8663f7e39ad961b754ee7de5c8e8f390c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonli-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e8776bc06346e1791322c97de75dbe5905bb93e7c671205b1d3fec085ac75db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonloggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d54b4c8a926e93beec48e7aeb67936e9095d34e48f015fc167af0fa33e11574e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in healthbottestservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca7387a0c1ef2ec15fea2dad8418095f55af6c8584c7a7e25ae06f267546e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...