MAL-2025-5998 Malicious code in eth-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7abd5491d54b588d04ced891539747a0d295877ddfcba02d67fa05ff8953d60b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6001 Malicious code in react-hook-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bbb033f9045b94810312d6c18ca8a53e34b6886863c10eaf2521f35349775c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5997 Malicious code in dex-sample-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5833f372bb58f2c3d63ada7d769c410b4464de4c9a0084d3e8f8ecbee863f4f Any computer that has this package installed or running should be considered...

MAL-2025-5986 Malicious code in ethers3-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fb5b9e90e4847906036d20312e485929a131f5272106349e82cb2538bb4b7e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5988 Malicious code in router-parse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79988cd859092569021535b2a0ed329cc589611cb68ee789a342c0a1b0945e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6014 Malicious code in okta-core-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32a2bc49ecdb3be636c0bbd744a8e1b52eb5b19d91316f69ce08d9cf870ed247 Any computer that has this package installed or running should be considered...

MAL-2025-5987 Malicious code in rollup-linux-riscv64-gnu (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a98f596921acebe0065ab2b5beda61f909a0c6595ad8ce2845d1d76a78fb9e Any computer that has this package installed or running should be considered...

Malicious code in @gdcorp-digitalcare/ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8da7a1bf146c62ef01e4c0f8e5fb152aaff95eb02a94acb2909faff2779f3da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5875 Malicious code in @gdcorp-digitalcare/ux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fecefb3206cce5d5e5a87c2c7130d9cffdb74d4b163ca1bc8e14cedd902ae6b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5874 Malicious code in @gdcorp-digitalcare/ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8da7a1bf146c62ef01e4c0f8e5fb152aaff95eb02a94acb2909faff2779f3da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5867 Malicious code in @ecommerce-cart-ui/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bac1b682b09340a43e74619f9ac55f2be98bfb14eb37a21597fb9f81b46f4161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5870 Malicious code in @gdcorp-commerce/cx-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10dd727785804adabaebb122da36be51c97a082214c8d6de8d70a1ad01f3b5e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5873 Malicious code in @gdcorp-commerce/cx-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28edf91ea21172ce7f3ff12d49071830bd423ed825a3b22b8e7228e1091cff42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5871 Malicious code in @gdcorp-commerce/cx-orders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ce80126682f56a0068ac541d5304235859cbf407b6945eee895e676fb186858 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5918 Malicious code in grabcad-ui-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee52ce65db4a7eae9515a5809a148be63f55d250702390c261cd05e173132799 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5917 Malicious code in grabcad-printers-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8860731583f8b23a37b8f806bd431150e444c82832ffd62d914ae5c0682dda8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5936 Malicious code in modern-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551ccc399991abf0310245b17e68d5526426644f1b0e41c7d7d6b1b1286a425f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5902 Malicious code in cmc-inferno (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db96f961787fc8fc35c246e14979af463d5ced86a881c2126d03b95423ff0cba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5898 Malicious code in blue-einsteinium (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d29bce29ab50051cea7b565e77089c60c66a34ba8f074b85f8e835a25e8c7f49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5961 Malicious code in telegram-pk-auto-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0440cb1173d59d4994a01cb91522080aef6f9ce7987bcf54f32ebf0ae8a3581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...