MAL-2025-3047 Malicious code in @hongfangze/network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cbb819a2b8b08d5618ea2d98b1f5be84db8ca160526fc34340e2b52b0409efe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3038 Malicious code in @hongfangze/cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db133f41e9415e6a6e70862c87024ca08903312e01ae76b9d2968cab187e79a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3040 Malicious code in @hongfangze/date (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af9a7da990aebfe4a65e85f282dd6d67bee3d187fde86c3610aae9ebf14bc3bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3069 Malicious code in keybase-live-feed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e37d8ed67c047350e5767575fe330037e3df4a1d2bc9a1159801b02c54a375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3064 Malicious code in checkoutsellerplatserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3ee286fa5544561b468d3ac01c5f000fbd2ffc8a1da55c3c4a5c2086b8b508d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3080 Malicious code in niji-react-switch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b24fa24fa460419a699b1ade3246daeaff2282d1f49a2afbfff84dda7c8d8c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3076 Malicious code in niji-react-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3647824806820bc4dec51343c82379b9993e030f8e9ccfcfded364905ec87d21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3068 Malicious code in grunt-ci-suite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cdab4cd85be12f6db64b3f2a4c747de300ce59bbb07da2848a8b86c0280bee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2749 Malicious code in contactbookmgmtserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4411a3fb5e56778179c647fb703b28d332d7b0f719ac7746b763317322a9a49a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2783 Malicious code in riskchallengeserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da27f27f9efcf0b2d496e909e97771157cccea447420e5fb908ed4e912fcce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2760 Malicious code in f0-state-holder-duke (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf4c907badcc403327c3447b84119be860f10f1e085424b05ae27f1c65343715 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2788 Malicious code in teleport-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c095dd595422be512b9e2f3a57d03c7a65553667c81b51fe163eb11fae8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2752 Malicious code in degate_protocols (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fe4c6c168853c64ec445a105a27ae438d1352107f6411c74f37d98f8ab2f960 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2740 Malicious code in @takamol/qiwa-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7ba01a4644646c8bbbd516eff9a3c51df7457629561f446c37ab76f428bf6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2777 Malicious code in oasis-os-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c78b9623607cccee2c32ab0a4090f9758e28614db6074a8a5dce410658c0ae0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2772 Malicious code in macappstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0467c582858f86d97b65e2ac8bcbe719cd97323136272b766d45045822a7baab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2737 Malicious code in @mukesh-d11/testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d20ad4be51546dacd490a45160968ae270951a7485eeb7a2ad2f3438efc63a1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2731 Malicious code in ethers-provider2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64291b6905fba089a2dada5e0215c20954bf12f15f76d27c5c341d2b91baa81b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2725 Malicious code in yxt-fe-center (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eefdd1eb0ce0a6fc7fac81b2bf725420903465a02f853bddcce53bb22c9463ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2692 Malicious code in newtheme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37975c22c99a1fe8dd968985aa358d4982778370c1eae16b94fd12afb266fc32 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...