MAL-2025-4868 Malicious code in pyiceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5fa44fe907854125c2e5e5ebed5ecc53ad3578ce319bfdf5a92524c65793185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyiceberg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5fa44fe907854125c2e5e5ebed5ecc53ad3578ce319bfdf5a92524c65793185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pydantic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cb9e1c20553202c4b4edf9fe0ab41cf161494ea68d49f7c930d8a5059b6543b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4863 Malicious code in pipreqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94775693df8241bc82973cceb421a0a3263d044d7a810c724173c0b4ada361bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipreqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94775693df8241bc82973cceb421a0a3263d044d7a810c724173c0b4ada361bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opt-einsum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af28147ec311b3f20c1a63a200d242102077c353766cd3b77c9809bd0af917e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openssl-pkcs11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79dc9baa4004010efe414f668e04f952497b63704184784cffcac6e22d8ce16e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ohhttpstubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 642efaac1637742aa2d3755af417f202219293d844b0c0ec46300fa7fdfaf046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4859 Malicious code in ohhttpstubs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 642efaac1637742aa2d3755af417f202219293d844b0c0ec46300fa7fdfaf046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4858 Malicious code in office-addin-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4af71d95c178cd7b60b7f8f5f758ebd7003e5b853b2649a1ad465580d6751f6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in office-addin-debugger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4af71d95c178cd7b60b7f8f5f758ebd7003e5b853b2649a1ad465580d6751f6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d3ceb026e94d925a50747700634d96a0e709e7c3882dac41638f6578a9e7228 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea18e81b4f8dd9695b27d71a047d0e8f2e6c2bb52dcd1b3b3f19cde0391c2fa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4872 Malicious code in react-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea18e81b4f8dd9695b27d71a047d0e8f2e6c2bb52dcd1b3b3f19cde0391c2fa5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in networkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca30d930400b8c13a77995d9249cc90207ed207eef9973b5ee86f4c79866ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meteor-react-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10edb5e94e2b6aede51af9b2525726341571187cb32e9a56e9b86639c7130341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in media-recorder-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a0ea0109d577f9df113fa325e2972e99d701b2a51a9453305c09381bd93d902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4849 Malicious code in lubridate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d4855d325a89044ad899ef2b2d8f664e9666a6d8ab93f68167e3dfb879830f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lubridate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d4855d325a89044ad899ef2b2d8f664e9666a6d8ab93f68167e3dfb879830f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in listenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4140488867aa92de02b72ad33c7ef4a3ed4329fa8de9b7bfe1a4e64d0bd81d70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...