MAL-2025-3265 Malicious code in transactions-generation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 159707d341deafca8ddc267f10b9d6e45a2aa4ad7677dc24fa7f23202d0db1ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in responsive-pitch-fx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d668a688ecd5c7cb1ff11b793e7a8664fff947988627a1e0ff5be58aedc02bd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mlbtv-clients/isu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130a1ca20af439a3a3aac26f4a56391a47dfbfa51c48fa2883b404d415c64b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3261 Malicious code in responsive-pitch-fx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d668a688ecd5c7cb1ff11b793e7a8664fff947988627a1e0ff5be58aedc02bd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3226 Malicious code in @mlbtv-clients/isu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 130a1ca20af439a3a3aac26f4a56391a47dfbfa51c48fa2883b404d415c64b38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ezidox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77793c97cf9e01c68e50b8c80e44f0591a67a78cbcd13b931f43cb56dc7fe0b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3214 Malicious code in @csds-web-components/csds-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae5a6c41775270cbe4eca04b93c31d39f47688db4b549ea73fed1157bf612c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cat-wc/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac8c9db89562180d78f3b248882e95e33c0c24a2bc4ffdfd76b1029506f1393d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multichannelsender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 652cee53031dd1163364e949f53d53bfd223787686037d765131e60bd7a6a254 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in verif8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3cab370a2507d947a2037dadffaa0ccc89a16b8c11965420f1d524af20359d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in element-ui-locale-en (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65cfe05538769df2b22ed9c915a7d41c57874cd3671f5d9b9da0a63d201df3eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3218 Malicious code in element-ui-locale-id (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5fceb0684e44fef543d79d4744dc2a8e652e74219d8ef07c317f2d3f1c40dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3220 Malicious code in verif8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3cab370a2507d947a2037dadffaa0ccc89a16b8c11965420f1d524af20359d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3212 Malicious code in glog-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 971dcb9a7fdae650e637fc12c4045cf4c7e8cac575b4d6f6c18d93ba115e5f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in glog-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 971dcb9a7fdae650e637fc12c4045cf4c7e8cac575b4d6f6c18d93ba115e5f70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @talentai/carbon-addons-talent-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882f23d36229f817eef192caf4e51f3164ffbd979660fa81389291a6b522e857 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flex-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49eefd4354e4d8c5354eddd891739db212953f6cf5c4aa193bf5470a8e77c820 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3207 Malicious code in empty-validator-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a8bb775434b7294e63fe4542d85b6382e1dd38f2eef5a4db17f73eb7a8154d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3178 Malicious code in @medialink-ml/yuzu-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9676f94f42529927f93195df004b5ec83e0bc0487b3033ad8717fb0384fe9296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cffc6b2ef3ee7169eb637677097e46e1f9c980cd6fd606d1b521830c2a8cc92b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...