MAL-2026-5059 Malicious code in chai-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5110f40393583ef41ebcfa3558d782310a40a78227a040480d871c25311b79ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @uipath/aops-policy-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3ffa653b190d1fd6f355664623366bda5832396e46eb577a6da7e729d642ca5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bcryptjs-node-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f621b58cc468b09e5963a64bef46446818cfa742ca51366a9e256bdb6299b8 The package bcryptjs-node-js was found to contain malicious code. Source: ghsa-malware 3b410282355b8584d4b9c012154aed901dfd650f212d1a2a942d901ae693f3...

Malicious code in redirect-ld0k2a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f762105594d45064c5f4884413c3276f3290f34020261668e50bae1efafcff5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6220 Malicious code in svelte-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4125174a3a5dd31d226347f4233e451beb406573ff2e254d5b9b6289f52ff3af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5559 Malicious code in hardhat-deploy-notification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2081250ac75574ee18ddea2caa510104e94d2673de1ad4fa445d96559d2a1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3792 Malicious code in middy-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2680c1b38c5fec59b6d12311259c4f6af0119a326ab6f798afe61497f8ce2744 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3552 Malicious code in internal-payroll-lib-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b57b13614231552ff2a81bd698a53edcac5cfcc943ef879a6a2e1de08d7fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11833 Malicious code in imran-servar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9af64e8c6963a1d384ffab6087780576331442e9e8c79eda2f18e092b02b52d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alb-um-availa-ble-zip-mp3-file-20395-ive-been-expecting-you-m3mwh-apmisl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22fc68d2042156469205e75f4a654f8557c933212d8ff61b7068167cfd7b344f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9389 Malicious code in new-al-bum-av-ailable-35600-lived-to-tell-bt7g4-oftaau (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327dba2f98c7d7cb3d700ac2b74867d1a0e1fc93e5b8c07cd825dc020c6fc4b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8951 Malicious code in express-request-ip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d640e010ac10316c3c6f0419c77b933e2695ff224fd189773e30020995ab3895 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kk4845.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38684730b01368b7ae01946765e8bb76b27127d47d68019c175e498d92f577fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8818 Malicious code in zuwortr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9a6fc476831f5d1665908a5e68c190efe201ca54e85255b4572f2fd10ca6c59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/dolore-magnam-ipsam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189f6262c45d88ce12c02b90ec4c4d72740f3457771fd8d9cd41dac4b41bf576 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8136 Malicious code in @diotoborg/aperiam-voluptatibus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e717e1f4318ce646f6ccb8e93e832be8a07e25b7d8f391723e75d2cfd7fe8b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8321 Malicious code in @diotoborg/excepturi-deserunt-eaque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2288885262536d1f4e16c3dfaf9cba7bae1fec0c67a8c942d41bdcb4567e7efe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8322 Malicious code in @diotoborg/excepturi-fuga-sequi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a007c04cd3c49c2856ecdd944d6517b0655ae49337b8f300d8e945256509b58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8341 Malicious code in @diotoborg/fuga-nihil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb77952cc1256bd8061fcd3cebc9ce3eee924560d8724cf8dc709ed4e981da51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rgmedia21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 149f0ec9d0ba73619432fb062c58b93fad9f52f3f97034e25a8354eeca346042 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...