MAL-2025-2138 Malicious code in vue-custom-widget-template1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b54ec1679cbeb92bfd2aaa272446918c32899d07a1fc5e4211c07323790f26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fcss/ui-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7badd1358c73b5aebf13b4734aa71ebd55fd281b1a1a05a7f60e7890e6254741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2111 Malicious code in latoken-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ee97017f971097eca808bd30d71ebbf4dcab41d22f713e02e57f2ac21e202d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2126 Malicious code in saml-sp-linking-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cefc3296ba659b91b026973376ed7a792b2c6c13d304e42d3742eddd7ae5ed0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2035 Malicious code in console-node-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecc4bf06f248fd5a32e4fed3e3e70f9b5de43bde1b2d52cb55eca94c6f7810b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2025 Malicious code in @optimystic99/dev-utils-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb2ab837b7d490f68cfdc5949a511d2b810c1bc54efd16cb6914060b0bf52436 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1630 Malicious code in tfjs-backend-cpu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab996031ea5c2f352b36f8fe674a3567caea43a481c8484f1612f5b80317b57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1611 Malicious code in mep-widget-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd0595287736afbcd4a5eb42eee88ad6ac547864009d19dfcb6c2ecc108e526c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1604 Malicious code in keymakerclientapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544396b6dec8b769c83bad34338116bb792c077804b613a9e95f2584e2272892 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1581 Malicious code in emailconfirmationserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a1ffee276b06e97c988930fdef1d80fbce3b337b1d899282100ec35df0f126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1501 Malicious code in truecaller-profile-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55408360c27ab729757f91541958607c4d4d284218d7250e8e785134f1fb9402 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1484 Malicious code in gurubu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4e2206593db7db1c14c4f78386bcef91c603218c4c26feda8f080978f342cbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jquery.validate.additional-methods-br (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38146e8961491ebc882527395be69e281eeb62c0a44bba6abe87a8c037614c59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1480 Malicious code in fohost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 381794f08a206c0fe6726ea73aa3391fbf97c17ae26096768ee4fc054d2c007b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1425 Malicious code in orangex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8611718aabbb02989c71b283a18652ce97cf5c5cb08111f6a1dd7a21b7edc2c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1399 Malicious code in coinstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 286d8b6ab8cdb3aa670b6e20e27a75655c4e1aa96479e07e1684ef09ef31f7d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1441 Malicious code in telegram-bot-hoster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3b1f6f7d44822f546914ae3155fe660229e8ccb900d78e88fe8dfa32aa1ae90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ascendex-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142a52b8be8d82df662a3eda8e1ac0eb272c5af8bda1ee499d710997621a8535 Any computer that has this package install...

Malicious code in lbank-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4483597994b97f9d432d58dafb7ccdd29f39b8e0635768be69b16ea9bff3582c Any computer that has this package install...

Malicious code in bitmart-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a4122b4cb00eb3689bbfecf3e50e300b7778b673bcb6e7310686211fe129213 Any computer that has this package install...