Malicious code in somm-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f97c75802e77b1441a736bc934596858cb37f76df15372e07fd3ee7fbc2a5ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5198 Malicious code in pfm-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166c95fcae61b48f203052e0464f5f7ccfe8df81b02fcd4d12440c0dbcc74893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thunderbolt-features-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee3eda7524a24da1ec85916ab8b93146e2e1399af30190b04b9021b0edbf7d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwc-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5660699712881dfe7a83949c97116e726a98d13a948aa245b1b0aebaab71632 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5205 Malicious code in rma-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd3860d2c559adbec7c4b9f7969ba91923264af177c77229e3f4a50e31f9ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rulai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e395619a0bca0da893334e671820e1cbb6a2cb16eac6d86adc44b7aec33181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in envs-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d66a16720127b714fd0b4972d056bd66309e46b1cbf745656b742fe3bc33f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5204 Malicious code in prismicio-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1c6e5a3123f657ad2ed089a7eae83cd605ab7fb09da62d09d6b7a8b0cc039d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pfm-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166c95fcae61b48f203052e0464f5f7ccfe8df81b02fcd4d12440c0dbcc74893 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5207 Malicious code in somm-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f97c75802e77b1441a736bc934596858cb37f76df15372e07fd3ee7fbc2a5ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in math-utils-gava (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbfa97f4de0215f88db05e74ecb15d790ba8221495f33601d48f98303f3f93d4 Any computer that has this package installed or running should be considered...

Malicious code in vscode-docker (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61618685e358ec6a20db218d79632439bfc8286cfea396d5184f9bdbd019f640 Any computer that has this package installed or running should be considered...

Malicious code in azure-pipelines (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3befea97b94282d8ce4388e647f5f86caea89c7727ce5f913eb233b357335d0f Any computer that has this package installed or running should be considered...

Malicious code in libsyncrpc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57f85f0a813f1b8bc1fc6257ceea0ceb472ca32c150c0c77080f6c89cbc230f6 Any computer that has this package installed or running should be considered...

MAL-2025-5178 Malicious code in atom-keybindings (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 219e0f10bfd323b55844eafc450fe9ab318577aa3033796f99e2f5c93b1e6356 Any computer that has this package installed or running should be considered...

Malicious code in my-not-confused-packages (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a538815a196fdd5ba0751d871564ddee1dd8a5b285a933e28862c28faa25eb Any computer that has this package installed or running should be considered...

Malicious code in web-speed-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a061b921a44e1b6ddb0a7050eb5156679a950673f1fcfa787aa15ada94251219 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-mojang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c546cb9cfb37fc5b4a75a68896eb8c7cbd4d9be14ddfd39d74f9c47d42e86419 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v210 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff8e95541aebca54707b7c8e6f95764f12ec886f6adea6b072aecba1bd5d76cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5181 Malicious code in internallib_v210 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff8e95541aebca54707b7c8e6f95764f12ec886f6adea6b072aecba1bd5d76cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...