MAL-2025-6145 Malicious code in adspaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98bf52674bcffb7dfa7f1020507c064e580e45c09a87f5e02f704b35893b0ae2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6188 Malicious code in nodemail-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a1a416c6d186e11b3cc31cc998939044fa947ec048748fa3542568d609fc485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6170 Malicious code in json-cookie-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be88f5a49c7d58722c535bb587afc5d0ca1e519b765a459881be4bd9ca3cdb8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in json-cookie-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be88f5a49c7d58722c535bb587afc5d0ca1e519b765a459881be4bd9ca3cdb8b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6151 Malicious code in aspida-lsd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acc2eb7e748df3c152fd014eb7b9ff3d3933451500a1ef3fd8af63811ed846de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6144 Malicious code in adaptivecards-extras (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware faf58ad9cd734c67c84987538bfdc3425df8d975d05eb6ae506699cee00cc69e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in partnersservices-payoneer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bf0e98f995aa9aa5cd789c9dbcefb1c5c5320bba054d2c3c75950c65010ae5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6178 Malicious code in monosize-bundler-rsbuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babf3c7a4c6dc1fa0209d4cadd6a45eabab92db8a49425e91ec6083e4d9cfaf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in monosize-bundler-rsbuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babf3c7a4c6dc1fa0209d4cadd6a45eabab92db8a49425e91ec6083e4d9cfaf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6185 Malicious code in nestjs-io-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c13b0bbe7c82d1722e7645dc644ec8aa06ae8ae02ffbb4de663b4a2e9de09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6173 Malicious code in kiwi-module-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83d5585ffa8a9b91652a5a6696f15e108b45a86acc0edbe6ae6afb7ba4b0cd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kiwi-module-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83d5585ffa8a9b91652a5a6696f15e108b45a86acc0edbe6ae6afb7ba4b0cd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6171 Malicious code in kiwi-module-browse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa443b2926415ab44d835ed23e575a34e448c6501a1dee55d6dfa760ad0c5d40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6174 Malicious code in kiwi-module-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2065b8ef87a0ef23f1d6589f86841c8e890785f615a13d214446f9a6feb1b4ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6196 Malicious code in scenes-e2e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5cd330b48a21b8e14bf5680e109fce03486949f6eef75c9e430fa4fc318db74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6165 Malicious code in grafana-scenes-ml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9f05300f7b5b25cc847cea32bfd7f5e7f72a070edc80e219d4ec0c2e87116c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6158 Malicious code in dependabot-auto-triage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d0f3b4b8521203a882b46f61419d108cb731522a0a8c231bc89b22406803057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6195 Malicious code in scenes-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fcbc7d7a26ce0416a317318a71735a6e1c6c1af16ead4f04b8ce6a5ee6d4b08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-api-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e5aa735ca90e3d4b1c2b9ddae5bf3ed653d41adb73daa46efc83ec5598561 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6142 Malicious code in @verge-vcl-react/data-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c4f54ea3248c3fdbfda6a6a07da73bfd9f07ecceb0e4104dae677ae6452aaae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...