MAL-2025-4886 Malicious code in soracom-xmas-pi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 409a66069270c0626a428339c624520ef13c0cd1b1a96b7068da663ba96c065d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4866 Malicious code in pullapprove-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9d63c0752b89670b6482e68da1eea9182f7aaff439c8ee7c3c3fa03af22682f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in smart-request-buffers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c193e11c3cf5464ecf688ef533a29644044e7786f835d3a0f8d4e4fe1d96d8c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4884 Malicious code in smart-request-buffers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c193e11c3cf5464ecf688ef533a29644044e7786f835d3a0f8d4e4fe1d96d8c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yt606060-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a34a6e4b5985ebe933d9f77c07d0caa2d2c46ab01a085ddf49c79d900474f83b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextjs-insight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db00088e31ce8475190f64475d3a917f95185bbf176e0ac091fe160399ce6f92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-purify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 967c29ab4727c0c9222adf576904d3609dabb81458899c34c58b578e5437cc53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4905 Malicious code in vite-plugin-svgn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a99cde23a20b3b1af94f392f8111e499e64f0cc14b6e2244f9827519ca81d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-svgn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a99cde23a20b3b1af94f392f8111e499e64f0cc14b6e2244f9827519ca81d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @it-common/lbp_common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f47ad8887d3a6cf7a9ed49015421a0fdcde662db1ed194c1c753c1234254fd3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mockup-js-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47de2f1ea832ed5ca1de7b318fac1b4e38fd7f83c2b66d97c4c38cfab1da216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-intlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d68da68127cdae55b189751f3d17a5882f56394b012d93fc26e35c36fe6aa456 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32619602ea22f43c922bd51fb5af4f417fee447f162999a6e291f7f83a39e9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vyre-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57da43ad0f9a21c167b302acb7f928a62f1ef095d41cdf9621fbe8424fd6cbd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fyre-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e82542784f34a2534dd1dd5917f6740c32611b9f154b5ef6a18a62a2934667f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4839 Malicious code in jsons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c23d84cb2201d919fefd3fa95fc777c80ed4adbb5e2fc87e1e1430bcb6edab6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsons-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c23d84cb2201d919fefd3fa95fc777c80ed4adbb5e2fc87e1e1430bcb6edab6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-jscookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a039598d9f3f70e0ed6978355821d7e65491688a59a77f5167a54f7eb667437a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4829 Malicious code in express-jscookie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a039598d9f3f70e0ed6978355821d7e65491688a59a77f5167a54f7eb667437a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gwnodejssectest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945c98471715434a1dc98a21b4a8b558d81cbd6ab0260d6b2d5146f54e0303ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...