MAL-2025-4275 Malicious code in axios.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0143e37fa113bdd2975f3ecf0863ee32758e2dd808a19e611b51c0bacb4a8f03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4290 Malicious code in vue-vibe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab8de1f63578f65874a6d949bddf997d76bf6e1c2a0fcfae34f696368003df5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4188 Malicious code in pdfgenei (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a635759afaf7991ad303d483dd330e7a814d936a1b14116346cdc8b42d52194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4071 Malicious code in core_plugin_b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017d4d66c75e5abd747ac42ebec3611c23c459b9d627c55156dffafb700258a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4065 Malicious code in cdn-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46d020b8f0a6ff1bcbb09ee63d0083f060a65c38e6f1d6518e860750e837544 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4103 Malicious code in migrate-lol-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88dbcb391cecbefa568dbffa3d4296d9fa09eddb14625e899283b70920acaea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4109 Malicious code in node-express-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67a77d1ceecd09a751770bc9ef718c7d27abb961712f380e94dec491ec811fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4082 Malicious code in grammy-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 877553f9f9497ed8ae9c7207031e84315c467837dceb8b2d9b46eb2d5cc7a6ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4083 Malicious code in grammy-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0ed36c0c9d339418b7fb4e6d6a1935303e10cf8837050934a3d6d61f0a1b6f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4067 Malicious code in chii_wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a610d00eff2b9ecc9c1eaddbb33df6da37fed367750e31c9bc4ad81cc9f0e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4131 Malicious code in slowingdown4u (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f332e8f6680150c84aa7c785655341845220594fe64707a07857819503c466e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4068 Malicious code in citiycar8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d87e712dc1c0996cce8cb52981fc335b35095dc76f79509a5d80741d31df0c42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4106 Malicious code in mousewhite66666 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a42a543d6a08c88dab207bc91355cd7fb9564d732b071b0ddfab43eb7f7fd5f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4104 Malicious code in module-dmall-discord.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d57f50d40effb7b9df9c15b7c206e22b3ffb792478ca1ee993e45c62fc4b40ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4076 Malicious code in dexfile.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 030322be28cfdc4341c3cf0199d441c986dbb8f4eee5783c7838c7c6af53a011 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4091 Malicious code in karansinghshergill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d4793c012f03cb8335fa90470eac0ff4d868655a7f3c785d62ffb09b38bf8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4124 Malicious code in scarce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a05097c7c77bf6e33475e2e38daf131934703a7c79c56548eb012316c01e7e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4107 Malicious code in neodium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22e6859d3022b758670d5c459846ac12039cacc27e7895501ba5544e3e3ecdb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4133 Malicious code in spite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d198fd58550e91a2f8ac51c4280ed47c6d337e019d2069c1f6cb85a849be38f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4110 Malicious code in node-wavehttp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f86a00e28589e2a90709cc928ecf437d7df51dbe5685e8aa68dad43c7df6f77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...