MAL-2025-4833 Malicious code in gwnodejssectest1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945c98471715434a1dc98a21b4a8b558d81cbd6ab0260d6b2d5146f54e0303ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4910 Malicious code in winfsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7373ebded5664ff6ffc6ef61005630f01b8030ae072e04b3cf05e2cd56c2b20e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatwg-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c673435a301e9ed1203058fbaa25ef8011da36b69d1e3fab4253ebe9e4a6513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4909 Malicious code in whatwg-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c673435a301e9ed1203058fbaa25ef8011da36b69d1e3fab4253ebe9e4a6513 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4901 Malicious code in uvicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4f7ba398a2a6f412706dc52b14ad4928a3863790d54c8553cf728b68d373b2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in undetected-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 687b76dc0d575aed0afa6e7d747df99e768e0089d8a461c82a6a962a9ff9e5b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in typeface-myriad-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69986c638150b486614c90f972581c267ffae5a59069aad84bb0a2ff05d43f1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in throttling-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9b4f801ac497e2e730cbe31fe53c685dfa14df13b8db1dbb454e614a321ac8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4894 Malicious code in tedious-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ac4ed635b00d44b10eedcd216610356c00baa2dcc266a9d461b148bd50e62c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4890 Malicious code in statsmodels (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 652ecd7593c19928f04b76d12afc53ab879f625813dec79bde8d79ce065d24a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4887 Malicious code in spring-security-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c1536bc422839f96c59d0abf7e874f94ede428b9047a56668eb0293b047631 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scrapy-user-agents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ff2592eed2257896f8765049b3073fd6bb14f2696691bb3ed2f8925b0ea1e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4879 Malicious code in scikeras (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a571a503cad6f3d53b07cecdc303ec31a63e8375eaf27100ef3699961d08138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4878 Malicious code in sails-mongo-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99dac97342765bfd9039172f29af80e20ed854d90c64b5f495703527188c6df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sails-mongo-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99dac97342765bfd9039172f29af80e20ed854d90c64b5f495703527188c6df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4875 Malicious code in rlang (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd289b9631ea3f924b676ed269036ef6847da93210a3a684e5ef151915e5913c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-query-persist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 510db02a90f329eb7d168ccd3c9ae2f89d81e24f4dae93823b0b1fdac4bf2256 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4873 Malicious code in react-native-atob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b91f4867862f09ae93e8c5413e74fc6e717d421419c933ef721bf15df14c6e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyserial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad99aa8d1920abaf90491f3c8160c6903da1e7bdb086b854dd0e1e2ae434367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4869 Malicious code in pyserial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad99aa8d1920abaf90491f3c8160c6903da1e7bdb086b854dd0e1e2ae434367 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...