MAL-2025-6142 Malicious code in @verge-vcl-react/data-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c4f54ea3248c3fdbfda6a6a07da73bfd9f07ecceb0e4104dae677ae6452aaae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6140 Malicious code in @lain-test-org/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3309488f91f09d6b882b6b40fb36bb02684340b4fec01bc55816876748b46941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6015 Malicious code in rc-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5638d1bfc139a2ee01491c7afc44cf724fd4b1f7022fbf78bf9430a2cc3f236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5990 Malicious code in xeno-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4584c129d15f1b447b33ff8077afcf4b79d34b44dd6c9752ffa9a028790f9bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5872 Malicious code in @gdcorp-commerce/cx-page-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7cfb33d83efc9598ba1eef7145194848746d40838198d981254b66fd6a88b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5898 Malicious code in blue-einsteinium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d29bce29ab50051cea7b565e77089c60c66a34ba8f074b85f8e835a25e8c7f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5969 Malicious code in vite-usageit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b967c2b3def62623ccbff0e7e878a7e995fe0dd101b98430c3d1f875cd4729c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okta-template-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa63c053c0856df8269f5f2fed7960e203427d897b1fccc26acdfbaf8108cbc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5944 Malicious code in okta-template-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa63c053c0856df8269f5f2fed7960e203427d897b1fccc26acdfbaf8108cbc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acios.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 966461f7d916cecefddde93c1d93350b9f0fe50ed0e2505b1be424e48512da15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5919 Malicious code in grafana-amazonprometheus-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7359e2541c67fe090610ee101544e2e2da0fc6232b1fff166f71c0bd3c1f0e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-amazonprometheus-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7359e2541c67fe090610ee101544e2e2da0fc6232b1fff166f71c0bd3c1f0e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in heronumberone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44a7cf88992d75a43166e394a0faf68a3147180bab83bb0c6358bc6f64301ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5963 Malicious code in ts-immutable-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8973314ba8fa2b03657d72c713210715041e6b5afbf03cacf105e886ab18c68c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in square-crypto-utils-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c2a693727e119b7e668536dcb77730f98ba80f9bcc2b03f5bbc80f53fea74d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5856 Malicious code in @segmentation/gf2fov (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cca9c2565b19f690b835370484ad318ef144e452a6bd93f7fb9461803f3b5cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @happyfoxinc/react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35adaa5c8720836c739e2315328f940d5245dcc4590ffe7ac42b1e465b31388 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5790 Malicious code in pkgsite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5342744a43bef74cacd9dd96822d1ef228384fe12a9a4d22fd8cc0a4fcfde6c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5771 Malicious code in dradis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7954d52cb9efed1e6bca698b7419519943e5bfd49e00332c59356fef7afe6cf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5781 Malicious code in hubspot-cms-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb6184defa0162c7c46179a4c0e85e5df794bc2fadb23f9649184487324684b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...