MAL-2025-3822 Malicious code in conversation-extension-reservation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad7a16b6e0fa02ae0a1ef8dca56998a19255781b3db06d6b7616a0392acc0d11 Any computer that has this package installed or running should be considered...

MAL-2025-3677 Malicious code in @starkgate/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d04ac8d00e82f7a03fdd3b70ec5682e6ebde4a7fb03c4f1459f2b1125db11296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3695 Malicious code in poc-malicious-sim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 492ab8807d8b13a8c7f47cccea0091ee128f7f8874756d736d2e50dd46d1ad07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3690 Malicious code in krnl-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05d69f19cbdf8abd52c5c9a0197fbdc148fc4adc3a835890c3a148b1be4bf03 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3699 Malicious code in toast-sliders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25ae6ce1ee1c2577412de84246fe478a882ff928536906b59094154cf15b767e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3686 Malicious code in glance-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee4efe6d4c135136464de1f7b7b933c547869de8b71b6f645fedf3afbe4f5356 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3655 Malicious code in vue-highcharts-official (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77cfc02c501427a852db092cefc7ba8db24e59e250528d0ccc163e6b328097fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3632 Malicious code in josson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c585f748cf244fb99fd1f095a3df5fbe0d7d7112abfb274d4bcaab86a1f3607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3659 Malicious code in your-published-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cffcefb87ba1dfcfc4089b98727de2186cb5179c69a0f7630c359ff62ba3546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3613 Malicious code in awetz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ab38a23d32c01ded4e220aa81684169b2a15b5f423ddac77957543d2da8c7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3645 Malicious code in shaderc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b4edf61e87177ad04810a690eb7f35d3bb6c3771fe67e57ac3d9dca12fedca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3638 Malicious code in node-jwt-simple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b327dac41c47c206948d7e146a6174435ee74981c5726827f68050b3692060a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3633 Malicious code in kidding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ac1b9b208a68f6eb5fba2340ef58f1e62f83363b647916f6e5ac29be571f07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3927 Malicious code in world-id-discord (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c2aa40d0cfe3dd971a7de35ba8d570a70d3b34f516dd5d69eff3bd7309bf96 Any computer that has this package installed or running should be considered...

MAL-2025-3923 Malicious code in ui-cluster-driver-sks (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0df8e83da746ac6e7cd3a4ea82d15ef6dc513b4f6be89b8c2bb9668fc80efe38 Any computer that has this package installed or running should be considered...

MAL-2025-3712 Malicious code in eipsend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3604c7d9351ed524566db2c93f9e4a9138606327e884352f93f2efab29494390 Any computer that has this package installed or running should be considered...

MAL-2025-3611 Malicious code in arena-plm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f794e10373e988ac142e6dcebe8943efb8a623a7c9db9bee70ce592ef1e5746 Any computer that has this package installed or running should be considered...

MAL-2025-3606 Malicious code in adobe-commerce-magento (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6d37a2366d35f3960bd44382c3af4b61fa4ef998f6983dc7cd8bbe7dab3f78 Any computer that has this package installed or running should be considered...

MAL-2025-3587 Malicious code in swap-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc32db990bb425f3c32c2f312da5d2e3315f210e4aa1cc342f3df5c3827f6fe5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3589 Malicious code in twewewewest6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24697bace34244c6963d54b8439296aa2903a23b68833af4712c3506830d198 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...