MAL-2025-3686 Malicious code in glance-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee4efe6d4c135136464de1f7b7b933c547869de8b71b6f645fedf3afbe4f5356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3655 Malicious code in vue-highcharts-official (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77cfc02c501427a852db092cefc7ba8db24e59e250528d0ccc163e6b328097fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3632 Malicious code in josson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c585f748cf244fb99fd1f095a3df5fbe0d7d7112abfb274d4bcaab86a1f3607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3659 Malicious code in your-published-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cffcefb87ba1dfcfc4089b98727de2186cb5179c69a0f7630c359ff62ba3546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3613 Malicious code in awetz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ab38a23d32c01ded4e220aa81684169b2a15b5f423ddac77957543d2da8c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3645 Malicious code in shaderc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b4edf61e87177ad04810a690eb7f35d3bb6c3771fe67e57ac3d9dca12fedca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3638 Malicious code in node-jwt-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b327dac41c47c206948d7e146a6174435ee74981c5726827f68050b3692060a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3633 Malicious code in kidding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ac1b9b208a68f6eb5fba2340ef58f1e62f83363b647916f6e5ac29be571f07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3927 Malicious code in world-id-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c2aa40d0cfe3dd971a7de35ba8d570a70d3b34f516dd5d69eff3bd7309bf96 Any computer that has this package installed or running should be considered...

MAL-2025-3923 Malicious code in ui-cluster-driver-sks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df8e83da746ac6e7cd3a4ea82d15ef6dc513b4f6be89b8c2bb9668fc80efe38 Any computer that has this package installed or running should be considered...

MAL-2025-3712 Malicious code in eipsend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3604c7d9351ed524566db2c93f9e4a9138606327e884352f93f2efab29494390 Any computer that has this package installed or running should be considered...

MAL-2025-3611 Malicious code in arena-plm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f794e10373e988ac142e6dcebe8943efb8a623a7c9db9bee70ce592ef1e5746 Any computer that has this package installed or running should be considered...

MAL-2025-3606 Malicious code in adobe-commerce-magento (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6d37a2366d35f3960bd44382c3af4b61fa4ef998f6983dc7cd8bbe7dab3f78 Any computer that has this package installed or running should be considered...

MAL-2025-3587 Malicious code in swap-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc32db990bb425f3c32c2f312da5d2e3315f210e4aa1cc342f3df5c3827f6fe5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3589 Malicious code in twewewewest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24697bace34244c6963d54b8439296aa2903a23b68833af4712c3506830d198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3578 Malicious code in discord-json-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1e9377f415fba4ec726168295cc5ca3be775a940e1709f6a70a19a6c48c3dd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3568 Malicious code in expi-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0a80c852d048afe990e5644658ba661fb205972c1aa8f4b074ee3f9c7530d0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3571 Malicious code in mymte2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc861b79eea3d82ab6dc25824fb7dad325622a6cbe4012fffe07ad7c198b4a73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3558 Malicious code in ts-39-issue-ts-ignore-tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02d4a8f90b9a988e36249fe6014a9902821ad4c16a9857ab195189a26757624 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3549 Malicious code in deals1flash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8dedaefeb09b39504c5df2e0817c5259711dd5afd429d887aef2a263a8cb1de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...