Malicious code in rjs-test (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff96ebaa9a7e9bad85ca95367b0a36f1c3374ba9f80ce3fc5aac0a53671cb5e7 Any computer that has this package installed or running should be considered...

Malicious code in @emersonecologics/emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c229693a6cfa1c30c9c957144ab93c804e134a54c587ad75b4e2eb860d89b778 Any computer that has this package installed or running should be considered...

MAL-2025-5593 Malicious code in @emersonecologics/emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c229693a6cfa1c30c9c957144ab93c804e134a54c587ad75b4e2eb860d89b778 Any computer that has this package installed or running should be considered...

Malicious code in stencil-module-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7b81d9bc05cb0363e0a13a4f3ec52001cae4fcb470f11f0973d186fa47271b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5592 Malicious code in comcastapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31612a7938787ffe91079ad30056051f31a068066752a935bc2123267f409730 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in regex-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b936ae131832162bed5acdfe48c28a3ce6537c1fc7a50b579166c37116b7d358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-zalo-user-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5b947fc267d5c40a50dc48860ddebb3d7ab7b78e58d65e0b97ddec970698856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @stihlus/stihl-icons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b7a2eeaded2a276a85d303add7611ab4f65579f9d08c53712a84d46c304003d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @figshare/old-viewers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b582af08f54b24b027eb8ffb5e56e63e4efff4c947ef2abb5fc552a7476539d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in poseidon-validate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90aead430e86dd9f204e1a8db7e6adb050c5eeae8a938c3d570991ebac4c8ac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5612 Malicious code in grafana-lokiexplore-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cc39d2244f7b9883cfc8aab3dbe6a56ff2c2fc6469f5b351b1321c1670f261f Any computer that has this package installed or running should be considered...

Malicious code in cmr-stac (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe08a482b6fd733ff90ca659985e349edbc6676e0fc5b08d34a1bbdc825075c3 Any computer that has this package installed or running should be considered...

MAL-2025-5559 Malicious code in hardhat-deploy-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2081250ac75574ee18ddea2caa510104e94d2673de1ad4fa445d96559d2a1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-deploy-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2081250ac75574ee18ddea2caa510104e94d2673de1ad4fa445d96559d2a1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-deploy-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9d3b8f687f5445ef66903c25ffaee9514d721441a15b7e4c4dfbf58caa7930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextjs-babel-toastify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1eb6ce58e4dc8f8a418262d19e1e72e07fb2892e20e7b7d647ff5a352479ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ytdl-vol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1dd6cf64d6aa793ef6c5994096a5eec3ba42a561c6194c2f8f63a215ec42f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5568 Malicious code in neroxbail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daea843752c1f00a3fc0cd9f2ec9ec84c40263ca14403bb8444c4e00c6016976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5589 Malicious code in ytdl-vol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1dd6cf64d6aa793ef6c5994096a5eec3ba42a561c6194c2f8f63a215ec42f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chunk-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2ede01f53bb06fadc20c1b7cca9c6d00685c017c3d99901a5cd8791140e2ddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...