MAL-2025-4492 Malicious code in nayan-apis-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a500808f6303d2da4576b49076cf7171323167850ff6890ee9dcb7f801786489 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4507 Malicious code in skinnyvans-windows-arm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8e75c36e408e17166850d6ffed1c9bdb3d2b87358aa9aecbe72e660be6014a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4517 Malicious code in vite-config-pretty-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3f6b7466ad8fab94eb697f86931898faaaa7437f3361c93556cfae5f75f99f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4560 Malicious code in gateway-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe54b05ee1d5acceb6bc29fb2446737ebc56ffbe8b976e5e97b93794588ac8c Any computer that has this package installed or running should be considered...

MAL-2025-4453 Malicious code in vite-plugin-esm-import-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 769b40ee6390325702297fd5566f36d41bba67cb00a7bd3dbbb369801bc409b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4538 Malicious code in @dbtw/mfe-gateway (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fafde4d408da1ab81fb068824fa886f677ddb1b507e9f1040b740152f58adb3 Any computer that has this package installed or running should be considered...

MAL-2025-4334 Malicious code in document-list-extra-questions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f311a1014dd39c97963383ae0240c9ced38e74b96e8b880acd9c1bf8974c56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4399 Malicious code in seamless-sppmy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0389a6eb1c890ee2de52f64fe14cf1cea2bf0a952bfabdde2686784ddaece9ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4338 Malicious code in env-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c55ff102f0d25988d4591334d7aeafa4f43877f5d7f248e861ae77a9dabfea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4376 Malicious code in mshop2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b230b23967aac14c732f470e9bfd9d34d27bf592c1e3ca7150e827ef17cf5e91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4275 Malicious code in axios.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0143e37fa113bdd2975f3ecf0863ee32758e2dd808a19e611b51c0bacb4a8f03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4062 Malicious code in biggy-deezer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd10df9c64d337296146770abec6dffd39f38b2ef00323b91816164b3e24f9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4128 Malicious code in selfbot-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ee16ff7e543c8573a19890767cf8320aa7357d16d99197788c25180b8a8be6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3821 Malicious code in baby-electrona (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec384e55b0c31502cfa3a8ff82ee55f1991c43cd00c795f71d25165f25ac8490 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3795 Malicious code in next-auths (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecde41ba618c37507cba3ce0adf9fec9c17438fd3abbdcf1649d69d24ad38d01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3616 Malicious code in commons-net (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01fc821715d3f327c2080415c9a3db5c0f95a8a9f36135b0e6efb377796227da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3240 Malicious code in fatfingers-hahayeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab10b9a2ff027ef8bfac4c8953e64c6a24e799afecb082e727da93d58fd0cb47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3225 Malicious code in @harvest-finance/harvest-strategy-arbitrum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062f2e97a3824c2a6e95152cfe109cfeaa5426a6153438aad07eabee03820ba3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3215 Malicious code in @csds-web-components/csds-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3dc035502fe2552360c01c2157ffadef0e94f13981a392ac55b634cac666e4d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3097 Malicious code in exoscale-order-party-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1d9e3bc751aa2ee22164b84ad162f528902fea7f8807079ea48c1a9d302b42d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...