Malicious code in vite-plugin-esm-import-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 769b40ee6390325702297fd5566f36d41bba67cb00a7bd3dbbb369801bc409b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4431 Malicious code in catalog-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b8c5db0f6aa2b0836f3971d1e9520ad4895f5c5678b97abb13f89b103a19e3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webmaker-sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b71ddc7d061c8f7256f365a12a3d960f2fd6da0118ad1bc039beefa8387d9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4458 Malicious code in webmaker-sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b71ddc7d061c8f7256f365a12a3d960f2fd6da0118ad1bc039beefa8387d9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osuny (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a422d19cd1a77a3b8c8f23546a8b28a164d923cfef3b4fee3187c2bac2d8b19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vega-embed-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7c87f1683f40878cd29b73e1cdd93c106e07459ed60c1404af7f80af25853e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4452 Malicious code in vega-embed-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7c87f1683f40878cd29b73e1cdd93c106e07459ed60c1404af7f80af25853e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blocks-nextjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae607db145f1ae39e7375c25cd19509f7f82eb76be82e74ff5cc37650ef27ba Any computer that has this package installed or running should be considered...

MAL-2025-4425 Malicious code in blocks-nextjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ae607db145f1ae39e7375c25cd19509f7f82eb76be82e74ff5cc37650ef27ba Any computer that has this package installed or running should be considered...

Malicious code in elysium-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d164cca14ffe6f3b767b73a34dd534c8b74f7d39d685e0630c29ff04f25fc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mergify-browser-extension (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d8f2de81952e94086d23e94decb4b563c67c4a2022666fae6a869278e07c0b0 Any computer that has this package installed or running should be considered...

Malicious code in @stepstone-genesis/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5874a7aeef3ac8f8faaa8e232c3010de7fd69fe6e411681099034bbb0c712d5 Any computer that has this package installed or running should be considered...

MAL-2025-4548 Malicious code in @partners-types/generics (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 286b6e3a0670f9322ce7783e57233cd6fd2d58fca486ab1abf62f2037fd0c63c Any computer that has this package installed or running should be considered...

Malicious code in @ing-web-es/application (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7692fb7f2c8d0720f92ab88567ebb27c12e7cbcd9e735c8aa3676782f17268de Any computer that has this package installed or running should be considered...

MAL-2025-4543 Malicious code in @ing-web-es/application (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7692fb7f2c8d0720f92ab88567ebb27c12e7cbcd9e735c8aa3676782f17268de Any computer that has this package installed or running should be considered...

Malicious code in react-stitches (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6aadb4042b3d0276837870bb016b686e41ca410df61fda4ecf6d6886a1a296a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4336 Malicious code in dw-api-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed08393e26202c868c689620aab8691ce9d5f8dba49ed9802cca7d75fd2bb9f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dw-api-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed08393e26202c868c689620aab8691ce9d5f8dba49ed9802cca7d75fd2bb9f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in struct-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 003b22b8443887007116728f7f9a376db94e966dfeafcd33be4bc445e10bffc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4405 Malicious code in struct-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 003b22b8443887007116728f7f9a376db94e966dfeafcd33be4bc445e10bffc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...