Malicious code in dijit._widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa0d60292f6c7957aa330c2c5c33bd9c9bf860f405a547f3cdadd639fa980fd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jimu-arcgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7562fe8691e7f400454c23c32acb21241492a486b70e2d5e1cb597251c8e9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5161 Malicious code in jimu-arcgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7562fe8691e7f400454c23c32acb21241492a486b70e2d5e1cb597251c8e9c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adsk_react_axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a06612c4be43c43a557872482b9686a09f5b16a8d5f9c96611bcfae535406dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5353 Malicious code in @wh-components/core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f644366e1954c7d526d983cd6b69bd9996467e9b6d790ccb06d26d903439a97 Any computer that has this package installed or running should be considered...

Malicious code in @b10902118/note-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c32fc16a72dee911f560f1dc4b6915f586e2f408e93bfdb5b08d8c7444e7576 Any computer that has this package installed or running should be considered...

MAL-2025-5347 Malicious code in @b10902118/note-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c32fc16a72dee911f560f1dc4b6915f586e2f408e93bfdb5b08d8c7444e7576 Any computer that has this package installed or running should be considered...

MAL-2025-5159 Malicious code in flowmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4048b3f53349dffd22ba0305a35887afcb85a34660e7c2165ce6a98c2574761 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flowmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4048b3f53349dffd22ba0305a35887afcb85a34660e7c2165ce6a98c2574761 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-svg-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2a1717363aad3bb129687fc2526ded4d96a8d7e578862b6d400cf5864e1985 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5150 Malicious code in app-prd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb4dfa072fe28f45493885c483db8e17cfb04c8c56db854534cfb053b52ebfc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5234 Malicious code in plugin-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e88cbf7f87087cbc6dda9545bd987ae79997a0d8812613ac393f517941eb83e Any computer that has this package installed or running should be considered...

Malicious code in microviewreact (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb4aa3ed998e2cc248404754caf11f331bf993d7eb37d5eabdfeb08402bb69f8 Any computer that has this package installed or running should be considered...

MAL-2025-5037 Malicious code in mafid-dev-fe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36b547ef1882f646ffc42cf752909cf2d8483815568ff161e37189b3d3ca5d47 Any computer that has this package installed or running should be considered...

Malicious code in example-malicious (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35d3703ef56e66529b1b9ba0ccc6cf4e863591347a634a085a46636f082d79c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5011 Malicious code in example-malicious (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35d3703ef56e66529b1b9ba0ccc6cf4e863591347a634a085a46636f082d79c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test.relativity.package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0622baf7ab0ff027e2486e3839df7b968fcf6e47ba57656415c1b3a1005d02c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5015 Malicious code in test.relativity.package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0622baf7ab0ff027e2486e3839df7b968fcf6e47ba57656415c1b3a1005d02c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metaplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56094c5aa47c7f90dabdf4a647d1fb79534f42102ce0ea011b8fb4bc0aa398a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5012 Malicious code in metaplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56094c5aa47c7f90dabdf4a647d1fb79534f42102ce0ea011b8fb4bc0aa398a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...