MAL-2025-4118 Malicious code in rpc-selfbot-v10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac2e07d59eef832d8c3e404342ed24b2b1e0c1e99b6f2807d004c5ae6e85ee84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d672942f080fffda85d73f5bea601c52d4d3dda65fbac48e825eaf371defa25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selfbot-test-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe10be5c7e9e981e881fc79b331035b4b37c0896e4386fdc8a3e4abfd9d5204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rpc-selfbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c64c2b69b111e1ddfc8dc99d780ac832b4148262e160c4f68270f30c5edd33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatsapp-flows-endpoint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c4ee7de20264bab033d4f4b998239b7301103ee91c1fc460817aef7cf14ab24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shaktihacker (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe742c824848f300f6e3b49b60c5ccd47bb3c258769cc8444d8e87ca6a3404af Any computer that has this package installed or running should be considered...

MAL-2025-4053 Malicious code in passport-approved-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd37d39cf77560cc97cd69ef60b460e1d5af2dd23e47526e9830093d13ea9c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passport-approved-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd37d39cf77560cc97cd69ef60b460e1d5af2dd23e47526e9830093d13ea9c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06928cb5dce29b93a1ece92d5bb04ef3a8731f510409097aef187e63be4890ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web3-provider-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc3ff80c31877ea658c6e65be0a05a240bf2a26f8c84e19e2dc75e88abbcd6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evm-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4051 Malicious code in evm-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 494cc8b639f73ed70f7e4ee37496ef90ce35133711784f16e856e73ee4badb06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @act-platform/app-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3567b231d7c053086778a968fabe2174ddda3fff11c78d9973d2827aaef8d4e8 Any computer that has this package installed or running should be considered...

Malicious code in internallib_v473 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f24ada3129dc7b0a4310226f616f28d7a806b49c13b67ffdacff8aed8e0f2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-tecnisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03cf40376a567599ae485450f95be3ab8fe21b793b288e0e50031c702ad1c822 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vtex.google-tag-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec8647ff7002efd9bfbcca725dbe03a4ef6644b991ada2bcfb6807480fb8eb4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4030 Malicious code in ttd-lithium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c711048944c634cd49e0952d573c5c48f00dd01c409ae7ddb3848ae960a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3995 Malicious code in grunt-mrg-enb-autoconf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c04621f61f89e901d8cfe005449b45860ef03ccc63eee79c4250e31143c8169c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3979 Malicious code in act1on3-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 164d9728bc36bd4864ac4b7b0aeebb622de7f64d90dd5cdaef72676d16c43b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vee-validate-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63ace977c863bcb637c683acad480db2f66f9fba7f0c318b7adaed074fbe08db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...