MAL-2025-2404 Malicious code in razorpaysalesdemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 758506f6873d4c4b929bbc6e3411c7eaba0686de15eaea017bc724a62588458d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2391 Malicious code in new-nav-docusaurus-2-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 056a07097ce29a75544b9e104af6e236c35ff7aeac79d48c35c1a208a779f41e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2383 Malicious code in eslint-plugin-highcharts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07b07952c4a78f4c462a288e6a648a238e98bc0232aa1e4bf6a0e5ad25bf3507 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2380 Malicious code in elementor-hello-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3dcf5dc0f88c313bcb767622f9a1e9e169099597b2e519c7c3df4bc25c8d799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2299 Malicious code in chialisp-lsp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeede289ccdfe7d4487e01b4eb54ed16a8666295df50031d9369d92f75d0d51e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2270 Malicious code in prop2json (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba3f95e1ff84041bd744e219bdd29d520207636ad498e6d7609a6717aac068d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2240 Malicious code in atm-event-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4178144efdd32555def7fe0a5ab433097ec346dcd50babdc98b04be71e2abdb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2172 Malicious code in fdc3-web-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea3a43ef3e6b3ef461c23614ec97c2fdcb96b58abeac841b4ea929bbab9d2d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2176 Malicious code in innersource-sig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad63dcd1fd3cabf0e50ad3470ccfe9c3e73d7cd254df8f86133563b829882b09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2137 Malicious code in v1ue-custom-widget-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7e56b04ae3ca44fba371adba340a3933b9fb3e7899bc2da0a2c868373970b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2098 Malicious code in bsc-web3-bundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2d03484f0d23a8270e14878fbc772aa9463ff4c69612a411ca078c52e1b19b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2084 Malicious code in @usaa-grp-ent-conv-platform/usaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4550381eb1d7dd406c17d74a80a2736538299a38d1956dab139285efbee4ad7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2133 Malicious code in upbit-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d286e3f82c3645432dde4b543a65c1f912bca545c3ad1abd486e8efd23bbde29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2110 Malicious code in latoken-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63cdcfe3b15d2c174d58b54998cf056643085f18de21eda41bd23e4cc3bed7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2027 Malicious code in @sie-ppr-web-store/app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ee7dd1669e5fd58f27d9ea70c3d100d6f4f4bdafe541ff2185eefc2041c2c5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1577 Malicious code in cmp-dossier-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca47cddd0ff04336d55d7da2799d42183ab77e8b7270202739f7728e7904f712 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1632 Malicious code in the-integrator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 407040848d5d3bcd09845998a95e5be8dbe90b173fdc0f2ea31185f801ffa84f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1568 Malicious code in actsearchserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6c4eab78bddce77aac2f34051b50053de02bb1863af9c473abace0eb438b06e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1576 Malicious code in cis-photoshop-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a77d4b1246934467151f8c2fc186f13f5899f16b36f1f32caa547a0908a27edf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1618 Malicious code in package_events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74ede61665484ec6970f2d593a4363c19f20c93d1691ce47bbf4f7e6e1a8f3ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...