Malicious code in floqast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee9b823d5e1026c463d7bfda29b3832b2d54415a7bdd50538e1faf5d9ec0e6e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uvp-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7aa93c8e2d917109da033013f8606bcc260c77464bde9b5aaf84271dd32f2262 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1640 Malicious code in uvp-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7aa93c8e2d917109da033013f8606bcc260c77464bde9b5aaf84271dd32f2262 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in merchantsettingserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75cca49918fc7191500567500f8e0e8eef01aecd8ae3770e8ab90c80a25ce5b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1612 Malicious code in merchantsettingserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75cca49918fc7191500567500f8e0e8eef01aecd8ae3770e8ab90c80a25ce5b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in userread_ca-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeefb8d4ce3df4396e3e9d76d7378121581442546e61220c1a81feb794dabab2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1581 Malicious code in emailconfirmationserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a1ffee276b06e97c988930fdef1d80fbce3b337b1d899282100ec35df0f126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1639 Malicious code in userread_ca-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeefb8d4ce3df4396e3e9d76d7378121581442546e61220c1a81feb794dabab2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-content-loader-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f4fac1cd9b3669fd66345e097ee2be915ef08de77e2fe1a0473640df479d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1623 Malicious code in react-content-loader-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29f4fac1cd9b3669fd66345e097ee2be915ef08de77e2fe1a0473640df479d33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mailu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2943df57730a433ea5c58cc936493d5865bcee7485445afc4ce047d8b845c89 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in org.cocoapods.mosaicui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 384b3b0897f982184865a927d8c1bf962c0ae8f8bf551b5ead784b9a2b80943b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1584 Malicious code in exclusivemaximum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b28fe33236dabb7e672c7d6631b98bcd819bdd60b4a37d140ea7b78fe613591 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in liquidity-bridge-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f40a6382779a7d45d5a09b615daea39485cff80a3a6d9b0b8a1b5ad3f68d4ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1622 Malicious code in ragbot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61930f6fe18511dccf487d70fe3709eb3eda7cb06f67c342e8cd6c79553c033e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in harper-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 711268fefafa8fa1f45484f2dbb4d83b7ca0c87621b54bcde26e36a9717059b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ragbot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61930f6fe18511dccf487d70fe3709eb3eda7cb06f67c342e8cd6c79553c033e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in all.en.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c395f6ed37dd1a8e6b2b15422babd65aa6c8f28456ef07e8951ac7ede5c47173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in edubrite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baa18eab9661ff222643f21316f013ac3669e056c2bebc25e7db311de897222b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @supera/share (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c348a3e52ca7aa30cd6b9bd7234d6385f1305e8c0f04c400ff236df303f06628 Any computer that has this package install...