MAL-2025-4289 Malicious code in vite-tsconsole-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6727c1546f4afc56f343e8f3911a3679df15839cbfcb46f3f561c3de0faa06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3792 Malicious code in middy-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2680c1b38c5fec59b6d12311259c4f6af0119a326ab6f798afe61497f8ce2744 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3088 Malicious code in @pump.fun/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b2af9fba1ebc4eb008f281779b4d498271795051fc434a3c4a8e2e15f9e067 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1457 Malicious code in yizhifabao63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e401203ed8c584cdb95319e5420fa866fc2bfc7c74af5da32079aec65289308 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-164 Malicious code in babel-plugin-styled-componentsss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5912584dcf93c8e94155d4393fdc3cd508541ab1c09a39e8ac2d4c2d93667f09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-116 Malicious code in zqdl55513 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a623c3e69f707a5c5284a6e298d4d5149c282064e65985928f1277cd258d87d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1994 Malicious code in collection-events-discord-webhook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d12cf97df99bb97e69ef2b265ec820acb8cc39d7026d03d62e053b706505142 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...