MAL-2025-3758 Malicious code in coinpayments-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03cd3ad7581d9fc90c9a03479a13f8edcb80a999a15a2d7c2dcfc0a30b6b6ac5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3764 Malicious code in ghosts3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4043c1bd543dfe1287c1dd1d9b016beb0acfc6d126754bd599179713d3e36966 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ghosts3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4043c1bd543dfe1287c1dd1d9b016beb0acfc6d126754bd599179713d3e36966 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in conversation-extension-reservation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad7a16b6e0fa02ae0a1ef8dca56998a19255781b3db06d6b7616a0392acc0d11 Any computer that has this package installed or running should be considered...

Malicious code in @nitro2/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140caf464a34fc34d7fea71e7561ee5849558b1ee1c7987c9a38c265eb22e4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.robotics.warehouse.base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c888bbc76a87698356b86c72559a95c4a77dd4440e06d6ccb1423ae2aab3bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.furioos-connection-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c58a66214f806ff93b92a26cc583bbad8e5b14bde97afe154c5c850bc40585 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29020683719ce2888e35bc68573af9acf12bfa039f451c61178d38ae8210386d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in albatross-test2-module (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a452ae314d4752629c6c4f9009c4e7e65249f015e18a4caf86ed8de23e26bc43 Any computer that has this package installed or running should be considered...

MAL-2025-3671 Malicious code in r2-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2428435d201993ed319a0195ece085cba9fb2d8925289b64fe9c2ef64458662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3670 Malicious code in antani-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bc6ee4654a6ce0b1ac821dfabae9daec5d7ffc8149ea0fdb78a2230493cf4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gx-npm-messenger-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26007d847aa029d08defbaa44538b81f13b13adfd8edb4c7ea3fc335a439e0f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-lib-t1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0656cbf9afeeae51e03fe153910e1dad3a3840f219effb0583665acdfefb34ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ascpc-npm-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dfc46bf902782d78e5120173d965b16776b6f7d52ac27e8b6a05eb734290dce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in identityaccesspointsrv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7c91d904c61ea0d0dc69c3d616a5b6fc69014bc5694f175191f4f661a33341a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @johndeere-tech/helios-ng-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cafd54c91f17226053b5247b4cd518c79cc4e6462f2bf35455fc9a9f8b55c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @starkgate/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04ac8d00e82f7a03fdd3b70ec5682e6ebde4a7fb03c4f1459f2b1125db11296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3675 Malicious code in @klarna-travel-platform/travel-booking-shared-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f013426be635a2310d1320cacca5b4ce5067f6686d76993ed1ea4ef590315037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3672 Malicious code in @johndeere-tech/eslint-plugin-timbercloud-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61308d7848e55b8e455ca17307d037a12cbcb121760bacc64d9f8b574c08861d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3674 Malicious code in @joshcyber123/frontend-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8d770dd15cd82921c4fed3497ee3c3b6e58515c20307d8c8aa3f34b72a5e7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...