MAL-2025-5369 Malicious code in blurmph (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a388ac1fda2ec8130f5f2e3c7417a6d0c3ad7bc92a9c422c1ce7bafd296e1804 Any computer that has this package installed or running should be considered...

MAL-2025-5285 Malicious code in react-plaid-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2e5a7cd6740a8b92b5b0c681bce252fd1850ace8501de899aea496321176c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5382 Malicious code in confluence-macro-browser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d10c6adb7b55791217a6bf6c9112897e38df535e743dfc1d85f285adbcb03a08 Any computer that has this package installed or running should be considered...

MAL-2025-5472 Malicious code in utils-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2915f8670a8badcf10c91c6f4495435134004b4394050fd25077ced85b2176f Any computer that has this package installed or running should be considered...

MAL-2025-5481 Malicious code in wiki-edit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1ceb97b63413b094efbe0bbad468ef89f1617ca751fb66f51d9ae7c3f94a9c1 Any computer that has this package installed or running should be considered...

MAL-2025-5424 Malicious code in jira-triggers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fe29e329352c213ad9899b9096425dab4709925d393b2b31c1e6144c2062478 Any computer that has this package installed or running should be considered...

MAL-2025-5288 Malicious code in spoofer-ip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2da3af6f33c88ebffe3e46690a63880708c162a1c710ff72131cf99f3ead9674 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5280 Malicious code in eslint-plugin-gpuweb-cts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f89e00c1a962e9633dd4aec668c01f211d133f98f097a23064f4d3a4f0f9bfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5258 Malicious code in create-one-page-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33e88b813de8bbedaaa44610c78b34cf8ef9b2bd2b7489a8519784f79b7434a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5385 Malicious code in core_block (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abec18e0e968ed67b5d8b1b959a5d9da2c3cfea29f9bd1ac711c0a2fe70d83de Any computer that has this package installed or running should be considered...

MAL-2025-5260 Malicious code in demo-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7efb62b6588eae7ef14f94a8669af77aca640e90b4677dfcddbba8cce6ad547 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5381 Malicious code in company-secret-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27b257298761ee280760199b503ca3be60adbaf8ab92e36479e291e33db1b0a Any computer that has this package installed or running should be considered...

MAL-2025-5459 Malicious code in secure-r007k17 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbd04d692c36ca50563b6dbb1de8053730817b3f74b9e23389dd90505621062a Any computer that has this package installed or running should be considered...

MAL-2025-5349 Malicious code in @hamishwhc-testing/evil (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7590a5320a6247312b359ae81bd9e3161b399e1e70f505b55a7a34e5f5f4bc3b Any computer that has this package installed or running should be considered...

MAL-2025-5477 Malicious code in web-experience-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2573a173de899b4418c487db0925ec6d4bc915254dbacc39c55f266604d652dd Any computer that has this package installed or running should be considered...

MAL-2025-5246 Malicious code in adril712 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7c681a96f57755e00a35379a33d66fe574b02f5322159aaa4e0539d513f2068 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5245 Malicious code in @monorepo-lens/pnpm-collector (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67c6ea5bbdbe7b178435d3ad215c7b7a36c72b9a0850c6f074da4f085d90e5cd Any computer that has this package installed or running should be considered...

MAL-2025-5228 Malicious code in integromat-udt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb547f8f18d38d6961a510a598d8741dcd0baf2f8218a0bb5ed899fb606c35ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5220 Malicious code in applinks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c927df7579cbb8f129291c2b42746cc225d15855b821f735300d1773cbee4e5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5219 Malicious code in 84f2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bf0ef9e3591e3cb17182faacefb3f777ffaf4641a073cabc5c87226a2b9e7d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...