MAL-2025-4101 Malicious code in loveisbad (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36fa8a1e12bbc84c5893bd3d80363dcb95e903bdfec8cfbe652082141fdad6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4056 Malicious code in @confluence-classic/confluence-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4ff87b5122db88c06524939b2121d0aa2b413227824f46f1813bbbcc3f19d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4070 Malicious code in company-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd5015b0393c3e2981f574bba469382525576dba01b38627ab06d4244bf497d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4122 Malicious code in rpc-selffbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3c07eac1a0d04e26728125d74f3c6943fc7234cd4412cb6daf896b3abfcfef0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4142 Malicious code in web3walletconnect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6379b5bb35b541783545d3399d145213c35e8db9351a2ba95b8ef457db094e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4117 Malicious code in rpc-selfb0t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0503bf4d5b1938a64738201852358eb8f04b85b794a3fd663c97367f618ca8d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4130 Malicious code in selfbott-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 860baf78f0f4f83405dc224345b0d30845128219a809a6e76e89c17493419fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4126 Malicious code in selfbot-rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75c00971d4d896820617ba1bb41eb75f5236353cf89f9c1498f5749044edd566 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4127 Malicious code in selfbot-test-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe10be5c7e9e981e881fc79b331035b4b37c0896e4386fdc8a3e4abfd9d5204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4143 Malicious code in web3walletconnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd041cce75701566210bfe0ee2c05533985a2b8f887d5522e814d756ef86251 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4121 Malicious code in rpc-selffbott (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24aeadfdb12f863044ca5714c437fb59d3d8099cda972978383afa16bf96ef2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4144 Malicious code in whatsapp-flows-endpoint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c4ee7de20264bab033d4f4b998239b7301103ee91c1fc460817aef7cf14ab24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4578 Malicious code in shaktihacker (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe742c824848f300f6e3b49b60c5ccd47bb3c258769cc8444d8e87ca6a3404af Any computer that has this package installed or running should be considered...

MAL-2025-4006 Malicious code in internallib_v473 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f24ada3129dc7b0a4310226f616f28d7a806b49c13b67ffdacff8aed8e0f2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3982 Malicious code in api-tecnisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03cf40376a567599ae485450f95be3ab8fe21b793b288e0e50031c702ad1c822 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3996 Malicious code in hakai-xss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e8cc768298c405c50172bb23eff483fb8ceccc9bcaff232474cd9fc397e59cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3994 Malicious code in grunt-autogen-bemdecl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cfa135e81fd4cc5ac6752ef4b886ab74fab9af400847c42cc4a489ac9f41875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3992 Malicious code in feast-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88382c749d318e08be547eac655736cdeb1c86d92ae6ab6dd46e489e668c86f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3999 Malicious code in ing-feat-loans-simulator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ae977800bc8499cca67290da14297a7eaff9d56ada0a9a8657c0ed7f6ebd803 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3981 Malicious code in angular-monash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7281e9d55aa990f9d2ed6d6f8acc5d290a25f3d17fe641c841a5976b519e4844 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...