Malicious code in react-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dc16e0765ddb06bcc46c49b58deba17ff9d4fce6cc5b65ebba0f617cf44fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kalitest11 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26193c08ed761df2176023996662e8905acb48a4b9404a0df12ad9d1570ba586 Any computer that has this package installed or running should be considered...

MAL-2025-6287 Malicious code in headless-skia (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83bcceb835d149498bab1ac808c57632e42a51f4ee45c21cee8ab84b1ec14bb1 Any computer that has this package installed or running should be considered...

MAL-2025-6172 Malicious code in kiwi-module-cdp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34281bc0357b483d9a5d7b84475fd6e4c2db6e993a61ff41636ee26e388368d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5886 Malicious code in affirm-stories (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d272936a4eff29177065edbae96d257f877dfa97b8ccc9f9bef126d0b7552659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5948 Malicious code in pretty-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d026c38e3bb7cb5b1d371ac307d4728cbb8ded9508cb84340eed05baf1666948 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5953 Malicious code in scenes-ml-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c945347ba764d47a25e4a06c08fc0562576992fecb23b25905113a20289f0be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5913 Malicious code in finactivitiy-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40384a252c4486d358490b425b64817feac8db7c370887b9296e81d4c2d3ac51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5639 Malicious code in print-vault-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e05d07d0cbe84e8ef4ca39905adcf78905393b39d322ae7e582ad1ae99b177a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5823 Malicious code in reauthentication-node-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72a2ebcf785b83a7356e194089e96e975e8618fac2aa00fc1c1f3ba097500ae4 Any computer that has this package installed or running should be considered...

MAL-2025-5732 Malicious code in systemjs-builder-test (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de897090e555c8fe1834e43ec617a470a724ab1c0ffbf171899e4d839b3bbb07 Any computer that has this package installed or running should be considered...

MAL-2025-5610 Malicious code in regex-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b936ae131832162bed5acdfe48c28a3ce6537c1fc7a50b579166c37116b7d358 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5519 Malicious code in sdp-transform-grammar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26ec9a8ad7301b26c32473ba504289ab4b40d221d1de8d91e2d7119ab847b102 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5506 Malicious code in nava-clone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74fb4caf6f9420831f8001a0382c3a357186529a0cf6e822e884eeaa90182ac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5527 Malicious code in viry-nexa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ddb7e05fc484a43e52418729448927f385a1c81ea57c1892e47eaf5fd1dac88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byaziine_validator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f12a2c76230f3f02e4f5f0e1b7124c3fcdafddd9b28e6083e61b3c2a92f96eb Any computer that has this package installed or running should be considered...

MAL-2025-5395 Malicious code in dynamic-importer2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4468869b1899f5d6f33a0bb39a221a394f0d1fcce1dc46f3f2127636a40b500b Any computer that has this package installed or running should be considered...

MAL-2025-5370 Malicious code in bootstrap-modules (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45d845a42d64eb0f9732d82ec558f52eed95f2e905ffec7f0ae2849f78104e1 Any computer that has this package installed or running should be considered...

Malicious code in company-secret-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c27b257298761ee280760199b503ca3be60adbaf8ab92e36479e291e33db1b0a Any computer that has this package installed or running should be considered...

MAL-2025-5425 Malicious code in jun-xss-payload (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb0bad0a9a4d062fb4b4b42ac803616eb78ce2cee23746dfc3636d0909ee918 Any computer that has this package installed or running should be considered...