MAL-2025-237 Malicious code in scrumretro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 322bb93a5561d27c4a0ae6e7b7615cc7a14dc59abd5d4426bf0ca07b5c71c181 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-255 Malicious code in vimium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44509dfaad88d7d41ce9ddaab892cf01041d180c4338febe1840b887a9edab1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-259 Malicious code in wc-skroutz-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438709bf1de713b9fab756841aa4cba87bbfc22133ff796cb5ee46dcc8776d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-215 Malicious code in percy-cake-electron-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84391faa58dbd8fba6583b300874c0f4eeb13fef558586ce912dc3b8d9ba314a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-169 Malicious code in braze-web-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e81df6fadd36a9f51f5daab0483c919db2c42225a2e96eb0bf40c01be8eb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-201 Malicious code in lib-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fe973aa7a191c3af7d728aa84fd8833989b5b4fa4cbb18ffff5595f890fa540 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-194 Malicious code in ie8-dom-define (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bafd820b50caefd5e1af4ca12fcd7861408751d2ebe06de855897f04480f13c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-184 Malicious code in enum-bug-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5c7a3ad4ff0bbfe09e6cac40b10a7e6a0c15ffb81adb37274df55278e3b4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-258 Malicious code in vuepress-reading-time-extended (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bc2173cdec2761003cb14e94e23dc4759392b467f4f45b62ec5afd7c2353d96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-235 Malicious code in pyroscope-oss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78530d6378099081103c13a5d340a9c8562d2c041085a8c20893adb93bdd115d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-181 Malicious code in devopt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcf54c2d158de12c3d2d76b80c6977405217265d6e7da714233324d8cf8447ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-212 Malicious code in nr-reports-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a07c3a21ffff09fba609e9879fbf9abb20469637967f526c6ef288a5bfeeb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-158 Malicious code in anotherexternal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8048f8389fecd3d45d156d4fbd5dbbff5ece757ce08de730f4546368cad782b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-264 Malicious code in zk-settlement-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc5c0e7114cd5103b7bbb1048043f0f28d424474ea5070f1024ffcda2f8309f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-247 Malicious code in ssv-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d441396521f48556524fd4855d512807ec7548fc10a968ecc786535ee98dac6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-211 Malicious code in nimiq-validators-trustscore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 439234df75ca95b0a55dd5adb5b75241f16bd7d342b1e80ad5c96a53bbced90d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-210 Malicious code in nimiq-pool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79b8f1d025e9b377e0680ad86facb0ea1fdf8275c2759fd21838107b58b30d41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-174 Malicious code in console-webapp-static-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 881f4b0e9d871a25620edd0bdf015644703eb56726d7b1785e5e0eb18ca32e36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-154 Malicious code in ad-shield-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65332410795abdd16c79e5d2778ed52c4dc3725715f2c4624d21e1a5f4ca3b92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-171 Malicious code in chrome-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 945a0a50710064ba2531f6b43681d86f70f1abe054cbb593386e63f921369750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...