MAL-2025-1425 Malicious code in orangex-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8611718aabbb02989c71b283a18652ce97cf5c5cb08111f6a1dd7a21b7edc2c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1399 Malicious code in coinstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 286d8b6ab8cdb3aa670b6e20e27a75655c4e1aa96479e07e1684ef09ef31f7d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1441 Malicious code in telegram-bot-hoster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3b1f6f7d44822f546914ae3155fe660229e8ccb900d78e88fe8dfa32aa1ae90 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ascendex-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 142a52b8be8d82df662a3eda8e1ac0eb272c5af8bda1ee499d710997621a8535 Any computer that has this package install...

Malicious code in bitmart-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a4122b4cb00eb3689bbfecf3e50e300b7778b673bcb6e7310686211fe129213 Any computer that has this package install...

Malicious code in lbank-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4483597994b97f9d432d58dafb7ccdd29f39b8e0635768be69b16ea9bff3582c Any computer that has this package install...

Malicious code in kucoin-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea5c24a4b755eac4753ed0edc8481cffa8c4b84709d5c4e0bcf17871d598cffc Any computer that has this package install...

Malicious code in probit-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b90c84ef211f2f9ce83ee001f131dc0beaf0a6c6bf8667374fb9f14e54ae6fe3 Any computer that has this package install...

Malicious code in bazelbuild.vscode-bazel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a3a6d5668a11c86f47cb5dd213494db1669772099d1d5b58769ff2c33d405d7 Any computer that has this package installed or running should be considered...

Malicious code in roro1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18c1609db6ac5070dd199330c10e7402e538205a7e807ff6add79805753c0cdb Any computer that has this package installed or running should be considered...

MAL-2025-1180 Malicious code in ton-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac83c8d18317fa7c1f2fecc782c419c88d798a4e02d25874898824c47e74f1ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1104 Malicious code in custom-query-parse-serialization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54841d5b21c1f37a53ed8c5230cf6d43e948115b0116890c9bc53a963e08dae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1155 Malicious code in nft-transfer-transformer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b61c51743bbb7e45afbab35984b72d25a2743ce9b95ce35a49bf6637a29bca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-server-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2031c18b112a375fcbcf727d2a0ca070c13daadc4477fa5a6e61a5e60957f676 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-contextmenu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8362be56bf1f58ee716788c28e999749c492d649a758adde4383a23de279ffb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1113 Malicious code in discordjs-self-v22.3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95f2a02084b7cd92df40cf973c163288d499c321e099a11fc8dbb42cec5e402b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1136 Malicious code in jetpack-boost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ad5f27610bc7b64b84881ad2ba89f0c7dbe4a43f19215848e62d70dc54616fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.ai.navigation (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c96e3401f6c7e9e0c8aff5f71b8009ebf519355154ccc50f880eb92113a5a236 Any computer that has this package installed or running should be considered...

Malicious code in isctf11 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c33f3136f471972ddafc623ece4be1fd82a54838cc113de8a230a98f02ecd94 Any computer that has this package installed or running should be...

Malicious code in @nomicsfondation/hardhat-configs (npm)

This package exfiltrates sensitive Ethereum-related data such as mnemonics and private keys to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72a47b5bdfeac96982433856ac791ab0638f2d6f64f388ceb2a284f35597c37a Any computer that has this...