MAL-2025-4668 Malicious code in claude-pr-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78df9511839ca2f1261eadd3b5a9f886167ffbeb2e11f8d7c52f3470474d160e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4687 Malicious code in haji-fb-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c179e308c7e88b7d392065ed54495057f295048ce909d24f2345d5a28300d568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4680 Malicious code in chatbox-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a35305b84275ca0c727af9b0ef8ccb738fade0f991cd578f0455da2a1c9ba4f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4679 Malicious code in chatbox-fca-remake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a5b117803c27e7a6bb055ed45b86878c6edf34dea10fa6c638486c656c6ec8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4694 Malicious code in some-private-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74c2eb038ada13a2b2c86adb72a460b9a2e327e9682b3ecce38839b4f8de281d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4642 Malicious code in figwrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd13bb1130e41b3a2f595500f734384befef8c3107668edb6c2595730a13ddf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4654 Malicious code in plugin-svg-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824299b29c64a19455bcdc235b9c2726b1ae00b364f8a549bb972a1be842eb43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4652 Malicious code in phlib-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a4915ab271cda053c8653639ad5f83905fae202cf8b9fbe4123e86db9b87911 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4655 Malicious code in procentry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5ac317d8398fc0737c7dd1e8d17c7a213e621acac767d7b3365195659ae4364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4660 Malicious code in verylinh-sky (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7a2f858becbec37d67893dd85db5e5b64fdc82bb1ff3d81c07e18868c059f86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4648 Malicious code in node-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 843fe1d3338e398ebc485508d20455b921ed8e3cbfcd3fd1140d4aae32d34109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4729 Malicious code in adobe-parcel-transformer-test-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b58e301f0f85b9d9bf91ef63a56544bc62c9002bb5ff0e59733da758b1115c73 Any computer that has this package installed or running should be considered...

MAL-2025-4657 Malicious code in stake-operations-script (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ea2fd7f2b3976c6f3bab727d8bd2366c4ed8ddfbdaba9e669c7b01d1a3532e1 Any computer that has this package installed or running should be considered...

MAL-2025-4645 Malicious code in lib-wallet-pay-btc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1867a5dee260868eb8f3e51c3df89b8f1e5752dd2c8529cbdc4ac73ab18d7394 Any computer that has this package installed or running should be considered...

MAL-2025-4651 Malicious code in parabol-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82468091c3a867fd7981eef0555f14edc29822f932782c0fac1bf9e67a15d7e Any computer that has this package installed or running should be considered...

MAL-2025-4633 Malicious code in staking-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4731478e6aab60180622e956a2bb2f96e9fc476bad9c3e95b18183e8cb7ccbe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4630 Malicious code in messages-hub-realestates-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f902696a7235fc0a580f821f3a36f77ccf00c8f14ad929cfbc6b22bb47459ff2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4653 Malicious code in pkurbatsky-uni-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7dbcb621ff6e34880a313bab99393077ebdbb6915411f35c9648e1741ce502d3 Any computer that has this package installed or running should be considered...

MAL-2025-4602 Malicious code in process-load (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca9b7f021303c59709dfd4a00e08e0c293215fade24f655e4fe0ff057ef40d4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4594 Malicious code in blesx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e5b8fa8d08e2e5e4608dc0698b4e0e20ce49e1c93bfdbb4b37334cda83f5f6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...