MAL-2025-1258 Malicious code in react-scripts-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29e804e3b477f180aba3ed9674d889a1e235e2091cca2fd2fe31cd5ef7528978 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slack-azure-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd85e2ed9b4c56dd6a97f9bec08d80ee181b173bd49ba7f8bd4ea9bdbd421db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1259 Malicious code in slack-azure-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd85e2ed9b4c56dd6a97f9bec08d80ee181b173bd49ba7f8bd4ea9bdbd421db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in libhash-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b2e27ca6bff082d9645b924364c7f5bba8fbfa574d7f60ffe823a7c52cda079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pegin-cap-evaluator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54e292579a79498c1323d5f12e8d4265fbb51497c45e3b6ee6105143d97afcdb Any computer that has this package installed or running should be considered...

Malicious code in html-webpack-plugin-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 660341362f6329de70cdccedcc76ff3841c456fce84ac128ed9db104838ca1af Any computer that has this package installed or running should be considered...

Malicious code in blynk-ide (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87b8ecd5d02a552747321d52fd162a15432bc2afa8976448f1fbb620ba818180 Any computer that has this package installed or running should be considered...

Malicious code in bookingcom-connect (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eabf241162aa1ee247ac5a5b7d62ec16b3d85b386a0ec3ee2b266fd5d57ce0f Any computer that has this package installed or running should be considered...

Malicious code in html-webpack-plugin-v5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed88e44f9e2966208907dcc8fd1b170e683aa017e8a706289a5bd2134e60f37 Any computer that has this package installed or running should be considered...

Malicious code in digitalexp-microfrontends-framework (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ca94db6587b92069f32a0574951f800a7cf2789f0ca5ad3dce95bcb122e205 Any computer that has this package installed or running should be considered...

Malicious code in roro2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8182d2b109432a3af3949760f0339502685090cd2b138efdcf7e7246c17084e Any computer that has this package installed or running should be considered...

Malicious code in apple-sync (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c8a2862682c8b22d925c82e7abc361ea6cb147190926513d7f7c09af233899 Any computer that has this package installed or running should be considered...

Malicious code in twilio.github.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9608b17ef2cbe6a3b456206f03293337dd943e0de3a5924552bebc9b3eb01fff Any computer that has this package installed or running should be considered...

Malicious code in bookingcom-admin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9d072477020f7c118d12abd0f6a95b217ba0f4b34a64fd4b527722d51c87cef Any computer that has this package installed or running should be considered...

Malicious code in roro1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c1609db6ac5070dd199330c10e7402e538205a7e807ff6add79805753c0cdb Any computer that has this package installed or running should be considered...

Malicious code in pages-proxy (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e215918f5cc85a894233afe08ebb076c28300732fbfd5f8be0aab954b5e455bb Any computer that has this package installed or running should be considered...

Malicious code in apple-test (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6570efae35b1eb92c94a5da9ef732ec362809ca1b0df05057b3c7f025e9983f Any computer that has this package installed or running should be considered...

Malicious code in apple-tests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89ff93f95d8e6235296a34bf00a2cf834bcb64673a71326fba527454a5edaf89 Any computer that has this package installed or running should be considered...

Malicious code in roro3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb3dbafbc69e88d00a072639d1278fe66ea684bc6a2ef54df6e9757000bd82d9 Any computer that has this package installed or running should be considered...

Malicious code in guests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...