MAL-2025-2489 Malicious code in @accesshsc/access-forms-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5532f679e8c8daf9b32846e16d1f695ecbf0f601f32c63f11891266a56e71d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2470 Malicious code in pdftodoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14520ac90732a33be79f604147753e91fe812ad121b9fffa4b573a6e6793ec50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2467 Malicious code in malwaretesting2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 992d4e35601291d8af779953d2f285061a62412b41ee8a799245b99892ce7efc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2455 Malicious code in attacktree (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7da476a4c6326fba7be03913b209024e9c2bb6722dc57b4f960812616dc161f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2474 Malicious code in skinport-plus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19fd08e816a49e9680bab750bc6a7a68bcba51614fe279028ec2b888fca365f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2462 Malicious code in digitabell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c5d081167684c62d7fb474f6eec03aa5ed6f2d1c44c68afd453502d60bf9db7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2452 Malicious code in @financials/ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4e926cb5ead89764d2bf06ee99599588691f94bf8e2bc5976cb73d5aa722bf2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2419 Malicious code in swing-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74e0305658bb2e2835e269e7cb1b33b355945f3051b9fe3f58254ee225870681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2396 Malicious code in node-key-lister (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8413c7c25ae9c9e0b081bebc1c89bec76f5966b57a9fa2dacfe631523a106f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2416 Malicious code in snore-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2adbcccc555d322802b23b412a8a727bc22982f0fd574b51ca33e7ea4b89804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dingpeng-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b75b0aa0d412d9ebbf20ed32ae7e5c4505eae72feb5ed57c0669192cb6ff8c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2377 Malicious code in dingpengtest-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 325da1087c6b9a78d54fd2d9d92270a587831c91eda6e1620e828bd0a9eea080 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2431 Malicious code in vue-plugin-rely1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41339a779b006586f47ed496d71acbb4b97bf4174fdd98bf7aced85ed56e6c4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2433 Malicious code in winston-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9a7a8915407cab1038d31144af0dc322ca271f4ddcd30cbf0e040dccc9b7dca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2429 Malicious code in user-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8193a8f2fe2711193c348748cc627a0d0be2868b586830abaf1fe5b94d867c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2437 Malicious code in zero-timeout-message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88a6e8ed6991cf808053c17befcdab9455effa8b8510ef06d38f819ef7958071 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2381 Malicious code in epic-debug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d79b6f53b73a42bf490549818051758b4fafca55d32e9d85060712adfa1b5e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2409 Malicious code in remix-run-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5399b923491b48948c89e6e1e30d9d3028f6bb8db3bdc9f8d48b513a879ac1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2388 Malicious code in kamino-modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ecb59e56c69eee3911cd10b7de6d341cf4d2f2f41bab590b44428c5bfd8348b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2359 Malicious code in aiven-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7ef5fbee116dc7c6a033971fa455298110b289026b14470eb6120ae7aa06467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...