MAL-2025-159 Malicious code in api-demo-sample-lib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf23a2c3e41d22ea84314170a6f9e3359768c7cedbf3bb3235f4f1146b218fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webpack-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc49a758bac1d2b78a4c0e8880c22a12d4ee54f21af0e98829c17652f1ecaadb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in borsh-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f002385b3c94048b1a161d8afd15fab61c24c5e54a4a23d9020a22313bd3f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-demo-sample-lib2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf23a2c3e41d22ea84314170a6f9e3359768c7cedbf3bb3235f4f1146b218fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dds-js-devkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0db7ac7daeb916d2610c7e857e635a24cecf8264c32d39366fc297fcda631d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zk-settlement-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc5c0e7114cd5103b7bbb1048043f0f28d424474ea5070f1024ffcda2f8309f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-250 Malicious code in stylexjs-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b0810f5fe9534bb182c28c449a4ad5dc498cdb96461e00596f5b6933f2b67b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-242 Malicious code in smrf-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe5f2a775e2daa3de31e321378a09830febf17a6f9d692a84b1eec8430d54eea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-170 Malicious code in bundle-cryp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68e5e93c567878bc6b19bc6773caab5b8bb228ebe198a31386e7131754aeb937 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsexports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f561855348de37f202d4723acf874ab865606f3de38f9cc4ed3d91dc415e5368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-236 Malicious code in random-generator-decimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7a591cc5e685966c005b17774bc77fb8a5d268a3b8591b783932b1fb446341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-198 Malicious code in jsexports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f561855348de37f202d4723acf874ab865606f3de38f9cc4ed3d91dc415e5368 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nimiq-validators-trustscore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 439234df75ca95b0a55dd5adb5b75241f16bd7d342b1e80ad5c96a53bbced90d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ef412a8312b13b80beb12231488912f1488467e51c76b84f58deacd8e57488c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-156 Malicious code in ai-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064d09133421ca62cdc2479a659b99caf018de8ee41ce090f7c672b8ad474843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-217 Malicious code in platform-browser-dynamic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0880f25b6b890b3d405a655f11013af216e513e196612ec7a644b96838875396 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-176 Malicious code in core-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ef412a8312b13b80beb12231488912f1488467e51c76b84f58deacd8e57488c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-209 Malicious code in nimiq-albatross-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca3bb93a4278599d8a954274f80cf86e5e66bdca53e4d7b4ccce3b5c08ea237b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in platform-browser-dynamic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0880f25b6b890b3d405a655f11013af216e513e196612ec7a644b96838875396 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064d09133421ca62cdc2479a659b99caf018de8ee41ce090f7c672b8ad474843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...