MAL-2025-4815 Malicious code in base-hashing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d016b179f42c303733681ba512975f7ad0b2b792e55f57239c9303cecf8bfee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4876 Malicious code in rpc-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87182c83e9db057d45382e581932553c84fa77422e5721046571790adba09005 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4ad6dc27f068d9c2140a021ffc400d65281d8cb3bc6f19890e071c25e51492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4806 Malicious code in @loybung/textreplace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03c26f5bb98082cc1377c84ac4dc07a726cc856db23d49346f28ce6c19ff026a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4798 Malicious code in @loybung/encode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45bb70dace7a418d2161aade822a8325a2f60579220f62b64c07c32c05b338fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4871 Malicious code in react-intlist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d68da68127cdae55b189751f3d17a5882f56394b012d93fc26e35c36fe6aa456 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4912 Malicious code in yux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32619602ea22f43c922bd51fb5af4f417fee447f162999a6e291f7f83a39e9a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4897 Malicious code in transaction-data-generation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1a6cb3f68b22b02db63a832b56fed4db00fc629b1b3540dbae8dc8114daa530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4855 Malicious code in networkx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ca30d930400b8c13a77995d9249cc90207ed207eef9973b5ee86f4c79866ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ncftp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bc7a5d34f3860004cbdbf4f622418fa2383dd3ba5ebff2ed2074a4a13d1b85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4847 Malicious code in libxslt1-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01dca888124ebee488c3fdffe46760b8062c7b090ec88b917cf55144e2f46289 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4841 Malicious code in keypress-win (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f954e50f0d90246c5d2855aca594a6179bc90df76259b2b657e357f06af6cb2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4840 Malicious code in karma-spec-filter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3503f8ac76bf4e0ba36fc7cbaab721a6285fe53ff821cd82ca0f4e417308eb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4826 Malicious code in ember-reactive-decorators (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d84c1b54fe2e6e15578eaa4b72424dfaea95f68c7a2f8c9107d9d031dd0f8ae6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4743 Malicious code in flagd-playground (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48e70fd6860510489563cf6789b2fee0dfb75544c1e1dfaef731b0b5df5b34dd Any computer that has this package installed or running should be considered...

MAL-2025-4721 Malicious code in payu-ui-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cf0aeb232e5fb73a346852b81510521a06efd6f05c9b7760e6c13b3644abe68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4711 Malicious code in bank-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0763ca6a35d86ac26d0d79bf3170ea38a642062f030c19ac17589065a5e1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4746 Malicious code in infra-metrics (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e834dce6687a994025a897f7ab4b0c72fb30033eafd9999cbea3608f5eb6a268 Any computer that has this package installed or running should be considered...

MAL-2025-4915 Malicious code in @velorum/browser-authenticator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e353af93d4a22e451dfc92912518b7562320da8c7d93487012fd782d35ff170 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lpgoffers-api-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34828f326d1dd1fe0606f5f7560f90381fd6ce84f68f15ac551023c8fb52a2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...