Malicious code in web3connectjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f387b5fbd03228464d4424e763f855d7e1327cd5b6d79fe4fddec7e9baa9107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4028 Malicious code in trend-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef8b370de3e6037bf7e1e10804663b4f1e2aec1da1af9d9b84e498248503ec6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feast-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f88382c749d318e08be547eac655736cdeb1c86d92ae6ab6dd46e489e668c86f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4010 Malicious code in mp-cross (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53921b386b6a8061c81837604fae74f8719325a726df27664fb9ea723d2bbda8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-variants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 064c762261c80ca73923dabe79bfbe291b06b3b62cf25226ae5688463f6d413c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wal-eth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31f1190c63c1f6bf955ab1d1638b199634786321614c27c73a56718a80770295 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in valdatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68f4565e0cc0a62335e888be0acb41be1c47165a7d0a4e1482a34715864deea3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-validator-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2e959ea4d60fa68cfd23f7e2fee922a263bcdfbee4e19662eca073135680b91 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dahsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30580a69445d1f4395adb933d748209606b66d49a7886f3950130732dfde5ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3997 Malicious code in img_sharp_wasm64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23ab3e6f8ad3c5a6aace4e1f0719242cff714e6294b9f83cc1c950868fc2d509 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rpc-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a994df6820b169db6c3e6b611d8a56f7a37b91c3af7ad09768225564cffe6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in safe-array-push (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49e28af59c0738d11c301ca9b1483179a08a52085b83b24da5b9bc0c551ab5cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @hm6816/lodash-isequal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d580612f3b93a1ef18f906fdf2ed034148dd10850978e86b106998902deb0751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3978 Malicious code in @hm6816/lodash-isequal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d580612f3b93a1ef18f906fdf2ed034148dd10850978e86b106998902deb0751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @farabyabdulla54/wwframework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878bbe6bb33501c07824e4ef5eedb3cb047eada1750984daab66b0e3d966b93b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3977 Malicious code in @farabyabdulla54/wwframework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 878bbe6bb33501c07824e4ef5eedb3cb047eada1750984daab66b0e3d966b93b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3986 Malicious code in beta1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e33292cdfa414bc2f93c3d02239b3f683e7f41980b5a9efa884e2c836ef79eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-data-checker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b4c358b5a571c99b8b2f4b94a39729183ea9d5498e9407722a73f366bacd2b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4035 Malicious code in vue-bit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263e8ec144ae5e3506ba5d933df37534dbc2e8e020f7d64a7864bcd6029b2915 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3954 Malicious code in morrrisjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dee7d1b7f802394446206cf8bff0d4b68b96cfc7aaf1196fffe3ce0c106af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...