MAL-2025-2079 Malicious code in @roku-web-ui/kitchensink-ui-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f31410988aab4179e25cac48aad1e89d11878722cc4cb1d1c087fb5201f6de13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2128 Malicious code in serum-anchor-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c43199561186f5ce43ff0fd760c87d56375a9c388bbd6f058d1dfe4d4c0f4ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2134 Malicious code in upbit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7391f484ff16261f5d67a14345fd40f488d3bd82c97ee08473b69af879adc46f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2094 Malicious code in bitget-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c98dc8a8cb993a1e93d89d0909e8243bfd607c7a635f098ee3b3c103101cbcbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2142 Malicious code in whitebit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 281c3a63872d73a99ed3e71fd5a15acbbc2551f1922b2b295939ba05ff4b685d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2145 Malicious code in whitebit-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 847bddd37490fd2ab6f55b03e72b5a71f355721caadcddb82310262d39916056 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2114 Malicious code in link-outside-nest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60138fd924427918d630cea0c05320160d12aa498336cbb87a174ee5eb2231db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2116 Malicious code in morpho-blue-irm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28a07a377a39de069e4f8f9c05264041b94d825875b2f62cafd13decb74e43f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2140 Malicious code in web3-2-alpha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b4594c9bb4674f2a9f165fc30fb2a0a4422504c322e19dae701700c87444fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2090 Malicious code in analyzer_plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 747a848e1740f146ea6c00cc1bcc451280f4685bd6cf84e635361504de761cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2127 Malicious code in sample-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce665e88f829ec81fed84869682431912fd05dda0ed950a4a37db218cc2c6673 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2124 Malicious code in safe-apps-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee772577efeb73e60c62e69847598d10b2c086c650ecc35f87c82816ade2b8e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2139 Malicious code in vue-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0efc0a22034000a68b77f7b5cfddbb864cc72d9bb239e7fe1af0feb7643d1ae3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2028 Malicious code in @tim0310/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 622f4e3ebf1f361078beffb0b92380f7658703123c9f9e0f86a053e8cf6c4dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1688 Malicious code in @events-ui-toolkit/event-analytics-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2e120c48fe02e1c6878623273ed3cedd8f066e1b4f6ad2d5c43a0f9c2c3ffec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2022 Malicious code in @dealfront/df-dictionaries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 005f6dc68da6691a10ef5aad4e7b77f4e8cdcbbe7aa892786754c834aba4f46a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1904 Malicious code in my-node-startup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb8ec8a8489c99789cfcd7c441e3dd1e95c4380a18f1e53144de9f58cd025b7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2046 Malicious code in ossar-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8bf6218656218d743c04b66e989f4f9615fcb7727df4d40cc13d4dc4135a4cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2039 Malicious code in eyeglass-multirepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 515d77f526178298da65e48e6b4e433df01250b2c88e22e6f533e41fb0344bd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2032 Malicious code in bindbc-lua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c99a42c2ca94208dcdd6dd74e22b5b79b9b211d2afd1854339f31be90d6cd75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...