Malicious code in cors-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8939034e252aec0a1bb8e90a23fa9e524d966682283a461f00204f8bedf29c33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-next-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9098ebfb041888a88d100e173f83f951824eb6f393098d122919bb472a320dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5529 Malicious code in vite-plugin-next-refresh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9098ebfb041888a88d100e173f83f951824eb6f393098d122919bb472a320dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in velocky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59c90a9e49cd7bf616362e6e175865e9d59a7399ac59ad7cb8aafd9eb7b82981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notification-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d50a72b129f2bbf4413f253f4cc198bb674e07061123d5ba873a3374ed7ecd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in axios-browseragent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 141e0ccda658d78aaa45367fc74a89b9c94789f9a4309c65abc8f94d80043e51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bg-core-payments-automation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7f31e4b1f7d92e4d7eb25476cf6041e8360ea7a50a002ab1311b3629f34c0f8 Any computer that has this package installed or running should be considered...

MAL-2025-5399 Malicious code in ee_else_ce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1573503c97a28616ebbe0ac70f2124f6761b31b0ead756cc1b9e6a9b4a116127 Any computer that has this package installed or running should be considered...

Malicious code in ee_else_ce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1573503c97a28616ebbe0ac70f2124f6761b31b0ead756cc1b9e6a9b4a116127 Any computer that has this package installed or running should be considered...

Malicious code in sweet-bananas (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3807ab062bdeb965d362dbcd44f72337ba1fe130268e3cae054e1defa1bdf0bc Any computer that has this package installed or running should be considered...

Malicious code in data-layers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67531c9bea415b9b319ff84e3899f3268e00ffa8cf9b11575043f70ace21ee85 Any computer that has this package installed or running should be considered...

Malicious code in log-styles (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c86e8c217c9ecaf8f7718975790fccecd991a037b8764a08c4dd0754614a0c Any computer that has this package installed or running should be considered...

MAL-2025-5432 Malicious code in log-styles (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c86e8c217c9ecaf8f7718975790fccecd991a037b8764a08c4dd0754614a0c Any computer that has this package installed or running should be considered...

Malicious code in canvas-chache-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53cd51cc0d4949d913a5bc2368bc95601e8e8402591ad46084396646e4f75149 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in very-zeld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec45b5cdcc59c7f8b7328486d203c3f448f7e43d5fdbcdd1ebecf25b6fb072f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5518 Malicious code in root-direct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a3898ab593ffa99617da9a63938d10ebe716d857a81f756bac1b9465911abe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5506 Malicious code in nava-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74fb4caf6f9420831f8001a0382c3a357186529a0cf6e822e884eeaa90182ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5511 Malicious code in nodyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66a5bc6552866ebc6dd20133a9dcd39705a9eda32242c6d1c80b8e9b444514aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mod-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13965717642c4230905666118685f8751f2e81b8749c99163d74f840204a3a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-pretier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7de0fd2da3988016711f12d165ab5e9d22cf17a815aaeed0966944b96151dda5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...