MAL-2025-148 Malicious code in 3cx-call-control-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca09aeb5dd1513eb46048a6987f18b72f8c9f52ba8340cefc8521c2138be8503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-245 Malicious code in sparo-output-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815ab9da2f5926d787c29ea7fe61f713ec6679c627ef6602931de859c7cc24ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-126 Malicious code in gouraud-lighting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfc362cce48bdb5f578a8b148d9c1883aa7b66c4613c09379816e9ab15ca89e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-111 Malicious code in web-prototyping-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a14e26877ba590485f30ac33a914cfaa213c85de0503b2ff68bd4d9debc5e0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-107 Malicious code in uber-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b42422c68e4256dc883e7d5e02350870cab3c0068d92985ffa4c4bc4ab43df8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-86 Malicious code in efergvthdaadgfhrgewsfqwf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 894602cb30d010a59a8a636fbe8301d38272737acaab1eac0ccd85996644fe8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-109 Malicious code in uber-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfbcc0bce009349873248f526418b14cb9c9f9b575e74b3fc1787fda4af9b76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-108 Malicious code in uber-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0fa7ffb884674d60abc64c70868821ad5ddf53d08897d0b90570c2d47ad780f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-99 Malicious code in reactnativecreativekitdemoo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d947fc579794653736a44c851146ddc7e503173b00e1b3adf67c00ba851c5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-81 Malicious code in daglavaa2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86db69121f626ba65cf72346dee7eda0b49516a7279168d161618ae3c9102203 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-95 Malicious code in olivergreen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93149667e62337ce494ebf287aeb4ab68a2b6b96fc9d32b5262d381771b539e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-91 Malicious code in gha-update-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ebbdc2047d61c22672a9c4ccd50a29ebd7cc57bb3617aeb9ef883efa027d449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-114 Malicious code in zqdl55511 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce97905db0b38ee627d1c55a3e9edbec0760eda87837942a4cdc0ef0ae0f5a60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12166 Malicious code in @swiggy-private/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 225aed6cf9dbdada3a5ab91f0b0804c55be22874bb11c2ad67624a420ff39026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12167 Malicious code in @swiggy-private/dls-web-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 866e9fd01cfe3133ef1ad9f34a13b577f9296d283c389de22605e996c5ff2de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12146 Malicious code in docu-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6622a889906180340028e70850543b9d34f93618e7dee954ad8d394aa5c86be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11936 Malicious code in @add-wallet-exchange/type-api-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8805bb9462f791743ade0e86d29e6c574fbdd3f67079d132694c9ac3409f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12043 Malicious code in ssk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 668ed437a9bfeadc6dd1810ce81817581ce9fb0f3c3432c62dc1e9e5382f11fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12065 Malicious code in zap_contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 063e3a8cd4df1cbe8d271d03490b9f7dd78cbeda98767caf294735ff4cacef75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11941 Malicious code in apache-airflow-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c372df22c9d32de9b2be3a877474b47fc253abc67f5b69d611ebc9640559fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...