MAL-2025-4606 Malicious code in simpledep2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 785bcea7a5a8db24e8f8da4bf42202ea0b4bc0a1628446dd0c5275e964bc422e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4671 Malicious code in @fronteg/react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a00cbd466b7c4e34b73a25864bfbbf1d649af40b160cff27b859d85074a74fd7 Any computer that has this package installed or running should be considered...

MAL-2025-4598 Malicious code in motion-exts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 601e06f31b115364fdcbdd0d794fb32ea363fdf0fcd281f3ce7f332b6337b8d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-svgr-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d55ebd57427c5d4a72a5d0b5c933540ce481fba40f3633f37618562ef4c8554e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passport-jwt-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40c5dbee6898fcaf49fbac995a127fd5640725331d6ecc5a7a4b8cd71810039c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bugbounty208/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3880eb4b27327dd3c26a3000c1d1f720ec589fc10d0d490bc532874c0c1c9ed2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-authgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b288b33e1c8cf62fa86cc3a42c139bde6cc4674aec2cc0327ca503b64daf2a4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4596 Malicious code in ext-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14959c108b475b81cfdf99aa56c08c7118e686e50a188e9af0251a8fb780e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ext-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f14959c108b475b81cfdf99aa56c08c7118e686e50a188e9af0251a8fb780e54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odin-security1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d86b20d8160d57b785f74b9bba211706cb3432a2060da273c1b876e3d2cfa39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nexpi-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b8f8b92b2eff3d48f438a764913f3c88f02318ff7b4cc2d8783c332e76885b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4599 Malicious code in nexpi-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b8f8b92b2eff3d48f438a764913f3c88f02318ff7b4cc2d8783c332e76885b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mpsemea/fspay-smartpay-logging-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 743df569bb531a07b7075f6ce9780c5ce5d7f6276d932c99d1374f31d5ec042c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rest-icon-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1df42e0b9f4ff541c485fd5c4bb6ebabd85ce2a7aec08ffd4a6234650332ac9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethereum-smart-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e10c205ca79402ee59b57b5e2a0475562ba75988af429715c808ad690e6fa49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pancakeswap-oracle-prediction (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3439b65dc3de1c6c43d4ec5ae0e3db4a1fe713e0606f8dc3037ad22dd5741467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pancake_uniswap_validators_utils_snipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 791d7ac8f5692ffcb4db92ed0986a9f6c422640fbbe19c1522dbbc0f813aaeb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in escapes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a2e963bd0edf0ef49a74d25da006b197e5782c95ff0ea260b5dd72282ba18e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4527 Malicious code in escapes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a2e963bd0edf0ef49a74d25da006b197e5782c95ff0ea260b5dd72282ba18e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4533 Malicious code in rm-api-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea2d07f3cf2fca9f2d9c28bb289065312eb770f303ac487e0ffe75bba11604a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...