MAL-2025-4525 Malicious code in zeal-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b52d172cdcd738359992982c891dc3da3b7c4403d5cb3cb4fc4eb1650113d3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4522 Malicious code in wrap-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03a9ed7b659046381b6934ad92828286dcdec2b36fd7cad2a09b4335f51b490c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4519 Malicious code in vite-tsconfig-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5982ed9c063bb8a7de718b2960f09dab6a1dea1be2cbeebd8a5f8c3ce94816d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4474 Malicious code in blur-key (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1679003578817df182a4bac6670c2bf5d42f7fd4189d6ef78bc81206827d1b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4570 Malicious code in muto-kaiju-log (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe0438220e2280d397b8b556e2a7b5adfc978cb14fa47c0dfcb5821108fbc500 Any computer that has this package installed or running should be considered...

MAL-2025-4482 Malicious code in ideals-theming (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b76e002c6ea57373962d0b94a4186cd64f4de50ff591d923b550f96f25aa7fa Any computer that has this package installed or running should be considered...

MAL-2025-4571 Malicious code in muto-kaiju-npm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ff09fff02691fb8682b4201d712727ea9514f7d2cade6768fd0fe5362ef80e Any computer that has this package installed or running should be considered...

MAL-2025-4562 Malicious code in html-report (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76dfd70352bf673a00030f6d35ad320bc633fad730881d95d897d878d7ce662b Any computer that has this package installed or running should be considered...

MAL-2025-4560 Malicious code in gateway-v2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe54b05ee1d5acceb6bc29fb2446737ebc56ffbe8b976e5e97b93794588ac8c Any computer that has this package installed or running should be considered...

MAL-2025-4449 Malicious code in rainbowkit-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83ed1e8adb99f97a9039322cfdd84d79db451f0945c567837f21ecb05d6fc49b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4438 Malicious code in iokit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0809d84edd6d3d9ba71ac05151f2564c41a8d94a6e8ee6b57d8237de7ba7720 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4430 Malicious code in apache-iotdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff74a911454d2bde3e33e6b60e2dbf0fd679cda9731532351e3766b912c3473 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4440 Malicious code in mexc-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7500b4df256dbb552286c7f37d34b2748ff1b5ef9f95263acf51f4806a5b2bda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4444 Malicious code in mxc-klinecharts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c79272f6f70f9c9bb5fd7c93c139322148f3fe12787d784e9e7e8530dc002134 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4436 Malicious code in fe-second-party-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bcbac1a3c8c63cd47005ab85c88ef2933e702844df4a607f5f54157c0a2881b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4429 Malicious code in @mkto/analytics-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e03d126ce738a6d82b0471b765457bbd8b0cdea398814aa256eeb39b89a1cedc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4445 Malicious code in nsubstitute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77033df9455e373b7e21f347210206adb17103822278b3d6dacaa8b69423cc7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4546 Malicious code in @mse-entitlement-sdk/react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 995ec6e409e21dfda12726e0ffbf16d84fc04fda1705805e0ee90fe4e1b23f69 Any computer that has this package installed or running should be considered...

MAL-2025-4539 Malicious code in @fff-web/fff-utilities (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b538001307782f76d2333a860fd4464fcd00ee81502f585e177ec62b0541262 Any computer that has this package installed or running should be considered...

MAL-2025-4538 Malicious code in @dbtw/mfe-gateway (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fafde4d408da1ab81fb068824fa886f677ddb1b507e9f1040b740152f58adb3 Any computer that has this package installed or running should be considered...