MAL-2025-5033 Malicious code in hello-gator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99c626fd5c61521e9e6c52377eb5d3a75ea4230c12ca16c294e86ead8364c064 Any computer that has this package installed or running should be considered...

Malicious code in tim-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50e297c0a9f986b2fbafcdfd60d41c5da7141d50b7145f69606f92ca4423f00f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in talkingagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3405c426e57de2c17c74c5c754610648c613e377d1b63a59e24d767241599030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in processwithcloudevents-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8c9351acabc986c61d13f3792948c4426e4f75423a912f6a4cd08f046bdf07e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in http-proxy-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7998e5d5542dec49e826d015f403fed34b411fdd9e28030aea1c3aa0fc4657ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4834 Malicious code in http-proxy-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7998e5d5542dec49e826d015f403fed34b411fdd9e28030aea1c3aa0fc4657ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bs58-decode-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365e9781bfa38295c42e9eb63d2506e4d79922f9040b5ca8f39544eaab056c91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uiframebox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2c616a224cb417f60cd79d4602b85a358e0d787a50cf44ad48b4be6d7a59f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4899 Malicious code in uiframebox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2c616a224cb417f60cd79d4602b85a358e0d787a50cf44ad48b4be6d7a59f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e7caa25c734e04724db6b49ecc13404bf34c539b99cef0c60d7bd3125f17b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4885 Malicious code in solders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e7caa25c734e04724db6b49ecc13404bf34c539b99cef0c60d7bd3125f17b4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4882 Malicious code in server-log-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c5b185c67de0bfe5bcf39953a89a1ffcb666e055d24d971a6926437a672f1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in server-tiny-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8340f02ed93f95eece2017d2788917631ff5e62a3c2b04408288113576747a77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4881 Malicious code in server-bare-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39c5415871a73082265e769aa9eb273c1fa34089a841af9700ebb890c064d102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stylelint-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe442bbd2c1150c0a47f6b07e96536f93337a9f509f9ee7891a040a0a7c26f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4774 Malicious code in cwttools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca62534e7711771b6dd288ab65012fd737ec6e0fc380035eb827dddef397ee86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in springboot-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 767553d0189c47e072ca2eccece5b848745a1f6faaf34987293d9232d32f48fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in springboot-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8c54ec931e96de6b2788e07cecb1d64ae325d3df32749035073a24f1a762c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4889 Malicious code in springboot-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8c54ec931e96de6b2788e07cecb1d64ae325d3df32749035073a24f1a762c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ve-cores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e2fbdb6cafd7eab8bb680d66240f47ddaa35deaf4c5b4263899fab736fd522 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...