MAL-2025-6191 Malicious code in partnersservices-payoneer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf0e98f995aa9aa5cd789c9dbcefb1c5c5320bba054d2c3c75950c65010ae5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6174 Malicious code in kiwi-module-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2065b8ef87a0ef23f1d6589f86841c8e890785f615a13d214446f9a6feb1b4ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6176 Malicious code in kiwi-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dcbebb4e37e86a0a7878eafb520d0acd1ad5d8a97aabcce547b807bddec6cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6172 Malicious code in kiwi-module-cdp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34281bc0357b483d9a5d7b84475fd6e4c2db6e993a61ff41636ee26e388368d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6197 Malicious code in scenes-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede91952fd4d242e34d4fdd634b5d10a0f0d16145af1bfbfe011b8c5c1d02501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6194 Malicious code in scenes-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39e4ea55e37dda98df207b010b0fd6e64dc467ed051fa91d18337a7ea9e46152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6196 Malicious code in scenes-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5cd330b48a21b8e14bf5680e109fce03486949f6eef75c9e430fa4fc318db74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6163 Malicious code in get-latest-workflow-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d2fe1e8a2dd5f7f462bc112e5e6f5740518b4ade0c28f710ddb195f0415cbdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6147 Malicious code in airbnb-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1d7d33c25e202a6ad49fb54065863092fb024863cb59952744ea002c333bab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6159 Malicious code in fathom-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac1e7b59b9f2a49b04dac133e2367b50305f8105cbc53e45be4db10e1107daf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6155 Malicious code in community-pass-react-native-wrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45d465e1a0ba3936c02d875635041ba0362e96dee19c7f7d727391a4bdcb5dc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6193 Malicious code in ppsdkconstants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc09f5bfdfd7725488af3e5502891485f650447a780f7e5ad6f839ae7d3120b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6179 Malicious code in mozilla-l10n-docs-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d878786926dde4c1aa2b65c2241ee43a14fbd2a46d890e608e4374ef405ff359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6140 Malicious code in @lain-test-org/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3309488f91f09d6b882b6b40fb36bb02684340b4fec01bc55816876748b46941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6141 Malicious code in @lain-test-org/test-package2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7991201b15a132a9776af677edbd7577a27377c5d04b274757790c4a5b47d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6019 Malicious code in websyncer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f28928dae23e5b709d60631f287c84a15f4bf8bf64751f67c67ac46659174837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6017 Malicious code in evmlogger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7f613dff9c5a8240615af13856874523566cf158ec5fb8209a17f98b2359c50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6016 Malicious code in vite-postcss-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0637d37f1a6fc3f427c6a79a64570aa5d30ae202fb9a5a98031c38b4dbc27ed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6011 Malicious code in config-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ca038d2292d65fcd63e01c65289a778b680b4d88ac8f282cc3bcd15d496497f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6136 Malicious code in wc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0074aa23419396ed1a9fe8acbdb9bac05d585129e3723d4db8a9af9f457096c6 Any computer that has this package installed or running should be considered...