MAL-2025-3616 Malicious code in commons-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01fc821715d3f327c2080415c9a3db5c0f95a8a9f36135b0e6efb377796227da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-some-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef77aeb30aa83ff02708a8b79fc182591838ee0f280c48d729eca82e9a60bb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opentk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ef6d6289289b15bc63ba83dcc85e309d320ff643aeef688fa5b9a31701e2bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3639 Malicious code in opentk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95ef6d6289289b15bc63ba83dcc85e309d320ff643aeef688fa5b9a31701e2bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in your-published-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cffcefb87ba1dfcfc4089b98727de2186cb5179c69a0f7630c359ff62ba3546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dayjs-plugin-duration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d6c09f6f8900e2be647537f5342bb545a0ee4b4affee0e47006cc43da3d489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in platformio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9bb7d5665eff08ce5b374ad9aed6cfbc3e52382b8844ec4debdba9b0de6ac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0cb95a9ee76c31bf43c34e398b5f5226a4fa58d643a6901667e7736a3c58066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3631 Malicious code in jna (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0cb95a9ee76c31bf43c34e398b5f5226a4fa58d643a6901667e7736a3c58066 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3610 Malicious code in arduinounit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3000b1e04d46002942a2a037a04aa4bd574ab2125bff52806c0f518f728e7ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3635 Malicious code in make-plural-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef999981379280f98605a8386dda39c26b1b27975f440cb627710a7f01a213ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jade-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17361af15b63f316aef53a11fb6661254a32f301abc9e431c1c2e08f54bdc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3628 Malicious code in jade-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17361af15b63f316aef53a11fb6661254a32f301abc9e431c1c2e08f54bdc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sails-mssql-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9aa02c92e690ce82873d15a2bd8dab23940ca37b05b8dd851f223d17d91c923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3643 Malicious code in sails-mssql-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9aa02c92e690ce82873d15a2bd8dab23940ca37b05b8dd851f223d17d91c923 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3636 Malicious code in meteor-roles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35e1fc58c157a731ac3f86cb748d151de5034b62c77de3149f0b97573789b402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3609 Malicious code in apache-httpclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a77347ebb8573c5fbeca35230df16ec582c33958e0a5bad13704efdea35f24eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scheme-latin-1-transcoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a7f07dcb389459e63b870f8bbac4884e86ab4b5b5e1b33fcbc42c6cdf5d91d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3644 Malicious code in scheme-latin-1-transcoder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a7f07dcb389459e63b870f8bbac4884e86ab4b5b5e1b33fcbc42c6cdf5d91d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-remove (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c140227f254912a428a31e6c185e24d4d4098ac222b63955f3f6e7024d69941d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...