MAL-2025-3634 Malicious code in lucide-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c571b67979d102e5ccf96df30cc81389915df3cafeda514d98b4ebd24ce031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3771 Malicious code in rei-breakpoint-detector (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b6c8b1fd7f1cb2eaa06f06fcd8784424770048731e2333ffad8ced1ca3376 Any computer that has this package installed or running should be considered...

MAL-2025-3698 Malicious code in substrate-faucet (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c694048c1a8c1f3c9b8f183f75e0a9464e084cdaa8fc58c9a770190c4ab4824a Any computer that has this package installed or running should be considered...

MAL-2025-3536 Malicious code in nsemea-salesorder-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86ed634b0d87ff0a2f424fe1086742a8b22d74aae11f058d53c28885d3e10244 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3534 Malicious code in nsemea-purchaseorder-lib-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bf53835fe6b37e19bb183ba2e3ffc37ceeac570440ff7e4272b3e2f6dae377c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3519 Malicious code in @reserach_org_jfhalsdhfkslsfds/openai-client-gadfjgfsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83b090ef236e2ba26297f26404fb943955f719c58a2ae5cdb65e3cbb913f025b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3500 Malicious code in needlecast_b9s_jewel_fyc_fe_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0103a210a9570aca60dd6b0b9583710312fb9116674baaf17a9f6ae3084e462 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3393 Malicious code in dowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4df41f6df1da311b66bb02e6bd7ede493b44f3746f30acbad2c3dfd7403166ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3275 Malicious code in router-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcafd9f13b763d68deff486e2c07a83a3824640dfb106f472de1e049711de470 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3250 Malicious code in helper-annotate-as-pure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a2ed0a68aabb50699a8bbd25a26ea827013ad9225c5bb5affa461c8a327b1ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3240 Malicious code in fatfingers-hahayeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab10b9a2ff027ef8bfac4c8953e64c6a24e799afecb082e727da93d58fd0cb47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3231 Malicious code in airbnb-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a857cdec809c53bf25c1227ddbd8321b2d64ff54fb9963377b146116012d1e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3228 Malicious code in @zkasm/zkevm-rom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d383d50e39e2bae07fe90f53cbe2c8917b3fc778425f0dd973b8d50fc6592698 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3217 Malicious code in element-ui-locale-en (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65cfe05538769df2b22ed9c915a7d41c57874cd3671f5d9b9da0a63d201df3eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3202 Malicious code in unreal-engine-material-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb5416560cfa4f934e2b9541b688b91c11edd2c04d167c8859641e58697d88ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3144 Malicious code in awx-sme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1589ce6a2912b9485d4dbe439e4e45d59310f17ef83a03ad8dbc73d34f60cfdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3151 Malicious code in frosty-umbrella (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20d7f515fb78bec30163c3692d2c0c01dfd49d5027dd597d31294aba1c7e57e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3166 Malicious code in stormapp765 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04a681db538ae851a3f840e7771e9cfbf20b575dbe1f061c22a0d00e4b9b333c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3121 Malicious code in telegram-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce62829b11f6b1d14180b7d6118a912d59527d30f5fc952fe5aa3416bab7b1f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3101 Malicious code in internallib_v284 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2ff40b9adcc0502626a135525cea55f8d8198bf48919d23fa9445533e67ad3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...