MAL-2025-5907 Malicious code in dark-switch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12148dc0d61c4e63738c356e019b3cc4d6ef0b5f1b23fae084daa1be5dccefd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5950 Malicious code in pxsceneui-example-03 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a2056080eb99ee23c3a6b2689ac55d696a6b788fb2030a60415a006ee3ab16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5924 Malicious code in istio-feeder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7455087a858d4ab6e5e5e42c14c3fb5b55222d653b9b971d12b0fe56a4cc7a5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cpce/console-sub-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0e227ba31b179597ff26830a069bf360d8ce9ea5fe6ec81f517bd159dbb5d10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5882 Malicious code in @vapc-ui/search-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0da3194dfccd7f133907c4365b33fd21321477bd320e54e9115a90f0076ece9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @indigo-mobile/material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2503d344724b3360dc4c2d74aa730e700f9555ffddba341a9d7fc88361b184a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @indigo-multi/fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d045fe7886437131a39046affffbb0dce279fbc6abb9975753462f4c3309edd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonlis-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce7376d51c7762ca92d6e8e883d0149c250a44d92fcdea76667d07c5b584dff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vitejs-plugin-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 243a4e663f29ec03aed634b87165dccaf6f345b2e1c92479b95ef6fd28474ba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c09298c7090e31085be2d84c4a20270bccb912a70ec51629645b45d635b361b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notifier-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c838abd608c5a94498f447a0d0421c940e32b2216a2b6357a45742c5dc29fc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5964 Malicious code in ui-router-cool-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f8cdbad7d217500262088af80552709596ed86e414e2a6c3214b5a40efb8057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in laudekasarkarmulavakghantamuzi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53ada8ae86f15e6d70241f7c416f8e6b06cc0a99945f927863aa7a134e4e1ed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-router-cool-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f8cdbad7d217500262088af80552709596ed86e414e2a6c3214b5a40efb8057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5922 Malicious code in heronumberone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a7cf88992d75a43166e394a0faf68a3147180bab83bb0c6358bc6f64301ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5962 Malicious code in themeone-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17ebc64d4990db35ad6d321dbbff948ef76f999ca0a2e279f26644a32f0abdc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-com-developer-platform-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3ba03d0d0285dec410f541b8e7fb12a809792658d08b88105efe3ecf507350b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codecops (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d42dbe570a6f14ccdfa5bdc48c64201847ef6414ea612b8f0a0dc6e6a0327ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jss-0.8.4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d8111edf0983ef24837eb9f58a2a819f4c99f34a3243fddf898c0e4588f01e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in js-0.8.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476e6142baf13923d3fdcbbfce1ea57ab2f62bf72a7c190d3213bbfa78364bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...