MAL-2025-2353 Malicious code in @sheingroup/loveshiro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 524a8945eaa3e9c0e35a456f440638f7568e971bf57dff30c9b6a4cd0be14714 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2363 Malicious code in bigdopebro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baf62f671d87a93f755cd86da270bcd8a7cc804f896ab31d7332bdf34811afa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2354 Malicious code in @sheingroup/niceshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e1bf648734c0bb8b2f194c37cd38507d552d4ca5cb851fbc6c751b6fb1bfe69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2395 Malicious code in nicegirl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05d61fc6a090b764666270f91b100bc166fbb85c0227ac947e1bdc876bc8e6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2351 Malicious code in @sheingroup/babetonight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9f5da4050017cefe506f3f3fe0288f57099a5eb659ecd363835423f33389eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2296 Malicious code in array-empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9923e27ee77980880cfc13a3c78c4903c58bed58f9257ac0407d57841fcc7853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2307 Malicious code in empty-array-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 349e81874005a4e4ed11f5e452324e817f3fc61d4a22f5237445d562df83fb60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2320 Malicious code in mern-ecom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81fdc4ccb8d87c17695fc5ab8f7f8e41ace4f8047187df568530dc8f34d311d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2324 Malicious code in rc-tab-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b8964f26c1878550507ca94c6b9a9e5c39dea20e6fa0cec40bbd8bba88b6af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2329 Malicious code in shein-uesragent-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdca3a489ad131847e2e1677f86805c89bd1587e8a76fb2fea69415952284909 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2295 Malicious code in angular-remove-diacritics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5abbdf7a3253b0f21066be1be90dc829f3e83d3cd402e748a428c5a1b36f4918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2331 Malicious code in spectrocoin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290b36acd27bae687a488826038fdc7f97273030fd80026b3bd796793c70df5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2306 Malicious code in easeus.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eeac8284fa84b19966be2a1ba2e64a5fed1bfa544a303f110d3a230ccef69ae8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2315 Malicious code in hardhat-ethers-react-ts-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8762e2209b41b4f6eb94a4d56674ed8d23f5ecba64034e0825fe7490fea5c78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2294 Malicious code in across-package-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b173a9f2149fd9a8a3d5fe44391e97a0137f5ec27ae493dcfd7df173665c0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2246 Malicious code in code-comment-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26ce443e50fdb64ff72252215dd99c231fec238376c9f7b692c0214c2e27e582 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2253 Malicious code in dt-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f84c1cc320f830bd5436c3d7b8ccef2d0d6a0e8edcfd05e472854ed042a5b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2242 Malicious code in bastion-react-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b653fe85132d2b38f6455a8b98a9d59deccd8982eaf7c9e13d97d1037dbc6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2265 Malicious code in linear-zapier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3d3c3abe155e205917bb76c52f6e75b2812b2ff091715a891e29e6dac4b4628 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2238 Malicious code in angularonlineauthclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5e5f25e1cac80da371793d8ae6bcabf3edb1c742f67871b9777db35c9b7a078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...