MAL-2025-5676 Malicious code in chii-aungpao-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7612d6bbbfb9dc1ad7c5edf5f536d13eaa4e20da2e1a895caeacfb8b0e75140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5660 Malicious code in @bosch-iot-console/rollouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76a7c59a1a8e53130cfd7701d08a305d5e478e43a2a5b39f57258f504069f050 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5703 Malicious code in jsonskipy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 825aeade17635320d2922155fc8e36ab7810c8cd83aa62a8521613534dc52e0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5725 Malicious code in restpilot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea95902e229e600fed776ab58f9216738dd1db24c03890b9902da283f3413623 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5702 Malicious code in io.ox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f943d7e85ce7b15cc0e8fa0f234c36503767f627e103ac8062d96f57504efbe4 Any computer that has this package installed or running should be considered...

MAL-2025-5824 Malicious code in securityresearchpocaplmalpkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b52864b8ab4058696fe0a34e9cdea2db8e1f9dec2fdb22fac1adeb4143cc63a0 Any computer that has this package installed or running should be considered...

MAL-2025-5811 Malicious code in dot-net-interactive-kernels (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fd9b96d8e362f39434da180321dd4529c19fd43df80c54c561a2db56794270e Any computer that has this package installed or running should be considered...

MAL-2025-5795 Malicious code in sentry-eslint-config-internal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9ba8b7f921d459f28baff326f2eb32b49ed229eb7e2d551526035c8fcb2b420 Any computer that has this package installed or running should be considered...

MAL-2025-5711 Malicious code in oauth2-bearer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3aa2d2499cf414a068a46af982e2179810f9ca6fe985bc099dec22b8dc75469 Any computer that has this package installed or running should be considered...

MAL-2025-5603 Malicious code in n8n-nodes-zalo-tools-vietinsoft-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558c86142ec5c0ffd34c5b926a423a86c944aaa6c2abf1baaafe98fd68b68589 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5600 Malicious code in n8n-nodes-mtaitest-abc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44affea7a9444f2719826698691368c8040059c5aed1cc7b939116cf11b7d90c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5825 Malicious code in seller-assistant-commons-fe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce5fe0219875b1f9631f9bbd7ed53592500782697d8a2d2255f1e0fbce9398b Any computer that has this package installed or running should be considered...

MAL-2025-5822 Malicious code in pricing-simulator-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5c1139ad289202a8351450be1d1d9c57ca94946b8d066fbee4fa70796cc7853 Any computer that has this package installed or running should be considered...

MAL-2025-5804 Malicious code in baileys-cleaner (npm)

The package communicates with a domain associated with malicious activity. It archives /home/container & exfiltrates data to catbox.moe & Firebase, including IP address. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

MAL-2025-5722 Malicious code in react-fixtures-ssr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d710afc7119dec419c22aa6e052c351680e8510317df2c1ea02c3ab56eec3bf4 Any computer that has this package installed or running should be considered...

MAL-2025-5610 Malicious code in regex-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b936ae131832162bed5acdfe48c28a3ce6537c1fc7a50b579166c37116b7d358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5605 Malicious code in n8n-nodes-zalo-user-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5b947fc267d5c40a50dc48860ddebb3d7ab7b78e58d65e0b97ddec970698856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5535 Malicious code in pyroscope-nodejs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f63660c0844969995da8de5a83535772031d00f3247e8cbb5a40addbc21a234 Any computer that has this package installed or running should be considered...

MAL-2025-5560 Malicious code in hardhat-deploy-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb9d3b8f687f5445ef66903c25ffaee9514d721441a15b7e4c4dfbf58caa7930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5553 Malicious code in eslint-plugin-vhtml-slptypography (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05c2dc490463e3766704c773cd700c70323c52566cd3658a9acbdf5273f06655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...