Malicious code in assisted-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13d61cf3fd29a340ba0644006a1644be59bc8a39769b41c2586665e3c21120ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1376 Malicious code in prettyphoto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6977060dff1dfc717c3b009910fb56287bb8073952c6a1ac7f3dff6afcd6065 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in holahackerone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c18612fa91dc861c71f725e798c3acc7560a3f7735d2ec1291c3d90eec1f487f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grammyjs-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d05f6c295e765b1889ffc72832434e365ea15f5aa6f8a6a555f42364c86a2c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1379 Malicious code in telegramclient-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544758d4b45ebd5665b1bb9b068290cad56fe4f586df9ae5491321a32733dd26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1368 Malicious code in node-tg-bot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa25c03f22731cf537fcef307f4a17c8cde7f9e55ec3fbd4e39168cb337ceccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-tg-bot-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa25c03f22731cf537fcef307f4a17c8cde7f9e55ec3fbd4e39168cb337ceccd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-tg-bot-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7691b80bd73d248d18ca3ab676ebf09d22c6e9702f8e80ec44aa70b3ce3ec020 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae0ba85746959ae8f7ae3dc7a934de9e4cb299669dbb270322fa2d8871fd8326 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uzx-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b16788177d4ca8abd5a2034d36a92b7a3dc73c13e702d5d52ffaab3ada9c0cd Any computer that has this package install...

Malicious code in ascendex-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142a52b8be8d82df662a3eda8e1ac0eb272c5af8bda1ee499d710997621a8535 Any computer that has this package install...

Malicious code in gemini-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb67009761d760d10c90b8b5ad828df5d94924a1595158c9007254e4b755d60 Any computer that has this package install...

Malicious code in bitflyer-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863067deead8163671bf5ff2452d5c750b20362617804b94e8add1a563a3c0e4 Any computer that has this package install...

Malicious code in bitmart-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 842ce630d8da013a9dc026874f9a06a43f0766c346738826831fd3f79ba27f5e Any computer that has this package install...

Malicious code in lbank-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 478503c4a1ca3df17a3afbdbb8c6cf693d2a76bfba2dc8a30d55a86eb1ac0b19 Any computer that has this package install...

Malicious code in bitmart-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a4122b4cb00eb3689bbfecf3e50e300b7778b673bcb6e7310686211fe129213 Any computer that has this package install...

Malicious code in htx-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c05dd9781405f8a19064535fdb213fba19de58f671ed5bc64d2cf1ed95e6d7 Any computer that has this package install...

Malicious code in bingx-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92aa788d9b5268cd851c4d7c893d68e617a87955595f91059e2c09e201706ac Any computer that has this package install...

Malicious code in crypto-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a037816e38bab1c99484a360227650688ef0859f5e52d151d3b2c87a0865535 Any computer that has this package install...

Malicious code in htx-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea59d9da68ae649dea49d1c6f68c1e0dffcd2bde5987416db10abf148ada4adc Any computer that has this package install...