MAL-2025-4355 Malicious code in gop_status_frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3361e51fa8b0f6d022491e1aedda9bf77bf9c114f044cff36bdcbf5fb86a160f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4419 Malicious code in zdauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ee57cb98b7b6e701dc1d19d2b0097b50f824130d6c534a5cbabb106290f9a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4309 Malicious code in choosetreasure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3c43ff070447c858d06ececf2cad0c204c2ac862113a9e39661e16471bcfebe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4360 Malicious code in index_patterns_test_plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da13b3f6dc1e7d94fa7ab535b32341c00bd4dd577983dc33bacb8e59605606f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4332 Malicious code in datamart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 585164112e040e876d8f0d759498f9e01a70eb003e68fcad9832949a0289ce10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4321 Malicious code in com.unity.live-capture (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3664ab2388f69675052d3fa71e2047676393cdd75a8fa57ca2d1ca11b1b10891 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4283 Malicious code in random-dupa-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99f5f604116e448aa422338fa8d271809af42a57332bbff2963599c372b0ab01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rest-icon-orchestrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21efc3fdff6697baee6fe3ec8b62837d3ee9fa549ec7fc39595559ab5691f3fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4284 Malicious code in react-native-scrollpageviewtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcee80fff21305590dcf04ace763231bdd81fcc2ef72bf8492ed79a60a17cd3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4132 Malicious code in solsniperbyagave (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22d6ef63513cb6ba90c7d26166b050ff064c8ca07745dff68400cd9f0bf3b112 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4103 Malicious code in migrate-lol-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88dbcb391cecbefa568dbffa3d4296d9fa09eddb14625e899283b70920acaea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4083 Malicious code in grammy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ed36c0c9d339418b7fb4e6d6a1935303e10cf8837050934a3d6d61f0a1b6f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4114 Malicious code in raydium-cpmm-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ce1aeff6f99c8c97def067abb89997e877fccd2ee6717b2d87516e0402cf08b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4066 Malicious code in chains.web3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ab39d32e8af255dcaad40e29e294e4849e4c76273631024ddb7cc9a4398c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4091 Malicious code in karansinghshergill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d4793c012f03cb8335fa90470eac0ff4d868655a7f3c785d62ffb09b38bf8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4107 Malicious code in neodium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e6859d3022b758670d5c459846ac12039cacc27e7895501ba5544e3e3ecdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4124 Malicious code in scarce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a05097c7c77bf6e33475e2e38daf131934703a7c79c56548eb012316c01e7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4133 Malicious code in spite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d198fd58550e91a2f8ac51c4280ed47c6d337e019d2069c1f6cb85a849be38f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-wavehttp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f86a00e28589e2a90709cc928ecf437d7df51dbe5685e8aa68dad43c7df6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4070 Malicious code in company-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd5015b0393c3e2981f574bba469382525576dba01b38627ab06d4244bf497d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...