MAL-2025-5520 Malicious code in stylelint-recommended-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7140ae1a4cb350ca4bafc3879dbea50e300d52d841b5334bcb2f297713a4cc5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5516 Malicious code in react-forget-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a394c45b21ba1a2437ef3331b2c18fb40316d9276a55529d77c29c8f729174be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5411 Malicious code in globals-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95530b4f6700a81e9563fcc03525cb458953b3bfee2504f42e1cd50558a64dcb Any computer that has this package installed or running should be considered...

MAL-2025-5378 Malicious code in cf-install (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13bf383febbfbe211ef3966d1f7449a4bc3e6dafb727078945f859a53298a12c Any computer that has this package installed or running should be considered...

MAL-2025-5361 Malicious code in animations.less (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14f6fb61860979039b6149bdb4b51dda5325a417d593fdc36197b4a78a8dff74 Any computer that has this package installed or running should be considered...

MAL-2025-5237 Malicious code in react-smooth-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7510dd029031b29ab209e3114deb48a7ad72b83c7d10073376637b71e89abf7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5235 Malicious code in portal-frontend-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7318f2ff74b7adb55b31d5c2c7e7a7ad130d5d5796972ed5464beaf9e0b6312f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5236 Malicious code in pretty-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38d0eefdd1fa3df5fae851db7bb5244936969879bfe0651e61530cf72dd6026a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5192 Malicious code in @com.att.vstb/vstb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 554029aed2bd3e734c058d64b6b283e3534367b5d8cf1d6162845499091f8ea5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5191 Malicious code in @com.att.dtventertainment/dfw-pm-yo-space-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 806161588999d1c3f730dfe7672f8123c0cd3b6e2b28c00a6463f91ced635766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5204 Malicious code in prismicio-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1c6e5a3123f657ad2ed089a7eae83cd605ab7fb09da62d09d6b7a8b0cc039d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5193 Malicious code in envs-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d66a16720127b714fd0b4972d056bd66309e46b1cbf745656b742fe3bc33f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5180 Malicious code in azure-pipelines (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3befea97b94282d8ce4388e647f5f86caea89c7727ce5f913eb233b357335d0f Any computer that has this package installed or running should be considered...

MAL-2025-5440 Malicious code in my-not-confused-packages (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a538815a196fdd5ba0751d871564ddee1dd8a5b285a933e28862c28faa25eb Any computer that has this package installed or running should be considered...

MAL-2025-5183 Malicious code in mattermost-hardware-keyboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ecd12acfdee0d8c320c06fc7fdbeefd8c0847f90dc3df7bdee5938cc744dcc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5171 Malicious code in vite-logify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e65a157421ab735107ae923596b8ab46c598935d30810b1e0ccf879388850ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5153 Malicious code in dijit._widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa0d60292f6c7957aa330c2c5c33bd9c9bf860f405a547f3cdadd639fa980fd5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4998 Malicious code in testhelloworldfromitaly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c414227e2d098e8bc9abd91dfb8037346251a3160b8f88fc11318f5063c7d79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4940 Malicious code in puppeteer-proxy-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f40925e51ac8a3b8f89bbd8ab3a8f34b05e948007dc3b79a88a115191fbee417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4936 Malicious code in bs58-encrypt-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e93284d337753b93b8c896531454460484ca9f430906a64a7f06160cd7d354b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...