MAL-2025-2523 Malicious code in plast3y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 815f967e56515403f0f889b2184fa0b0e02653bfe7906f369de42c8781fa1480 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2490 Malicious code in @theoretical123/ethers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f44d0e1293ff85f758987b79eb290ef0efac3652257af79e2c30e98267c89a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2495 Malicious code in com.github-glitchenzo.nugetforunity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61726796c4ca9b58f4a90fb14b096634a49abd1ea591b2f740cecbc02d5cb0bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2528 Malicious code in sui-lending-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e6570f41c53bce293ad4b3bea99d8f2ed4c76e5fb5208785bdaf221dcfbe5d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2489 Malicious code in @accesshsc/access-forms-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5532f679e8c8daf9b32846e16d1f695ecbf0f601f32c63f11891266a56e71d78 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2459 Malicious code in coral-typescript-types-pieces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb60f10931d0441dea23891c7327d9eb412332843af333b6b4d4f06da4e88563 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usedin1calculatedmember.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed860b89d268513c84a79e07ffa072fcfbdf3eccee1b2506900c48c49abd84dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snap-design-system-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41a0edf987afa7aec8736b2683c5bb597fe53fcddad3dddbc3ea1074e252e8b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snore-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2adbcccc555d322802b23b412a8a727bc22982f0fd574b51ca33e7ea4b89804 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2425 Malicious code in transaction-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87755b296ad253c8447b95f24b7d6466b841905df1b49006e65716c41887e19d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redux-debounce-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aca08bddcbc410d19f5cc85276c487b26f76e578993be572baf88e57b23ed48c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2435 Malicious code in workfront-twind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7c06148979b56d31fa18740b0a7a755e2fd9227646b7b09a6f9225ffda0c0ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2308 Malicious code in empty-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4f29eb4e06a456c0243473ddb4cf4b5953ab107489b4a79b5f3ccbebf67ebcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rc-tab-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18b8964f26c1878550507ca94c6b9a9e5c39dea20e6fa0cec40bbd8bba88b6af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2251 Malicious code in data-ext-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da42338e541d2556618253303cbf11b710a062fa58a2dc476baca9aaf8234cbd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2258 Malicious code in gh-node-module-generatebom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a04173cc21773450d4bd86768588db1893acb72fbc0336681a1370f3c7e8e781 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2284 Malicious code in valentinesgiftt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c3e9e88211b3e2b0dfd9993c04491f26b66cdaece41f1d39f419686829270fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in franklin-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ae87b2a01452220350394a2c4d2671059d9016de72c9ad7692fe35628357c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2167 Malicious code in ccf-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e1d06cfd35d1e890891bb8c0478cd64f1c31901595ecd8a80a676d989d93b86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-hahahaha-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a60b5f6a059fbad46e0862b86aaea8203f5531a5d6691caef7ecdd1602146900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...