MAL-2025-5872 Malicious code in @gdcorp-commerce/cx-page-container (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e7cfb33d83efc9598ba1eef7145194848746d40838198d981254b66fd6a88b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @indigo-web/material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97079bfe959e2a931df0187447b063d5c5fc0998cf573097f9fb9fb36105d6a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5666 Malicious code in androidvoues (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7910b042dc0dd8ec99a4c7b8c717ff9f7f3a83ccae6ae30d9baa4e9019d30c39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-fixtures-ssr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d710afc7119dec419c22aa6e052c351680e8510317df2c1ea02c3ab56eec3bf4 Any computer that has this package installed or running should be considered...

Malicious code in frontend-redux (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acdef714be7b489390b18befe70797dd12ccf6a4ce971ef0c840b5f3008dde9b Any computer that has this package installed or running should be considered...

Malicious code in solana-dextrade-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b8f89467fb69d00785530ca32444043368fe523570c7f428d485319782d845a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb-error-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7df1010f67c9aa7b88340ac8b1041d477068c17370f2d9eaa865a75e3e21deb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-svg-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1b4540b7accc26da839119cb9cee8be93e168c74f00d68eb96e60241796fbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in event.custom (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d4e1a2acf7b5dbcce868542bf3f02afdd7175b413acd4d4369a891863a7e7f9 Any computer that has this package installed or running should be considered...

Malicious code in internal-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3d884505401eed92805f1ab05ea82f7cb8f024bd1bc32a575f2068814a90a69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @loybung/launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4338cbadeeb701c891e1235d52d6204c2fcec842a555133308612257b8409932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pullapprove-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b9d63c0752b89670b6482e68da1eea9182f7aaff439c8ee7c3c3fa03af22682f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pay-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dab6c4477e3fd12beb2c023319675dd83f706e7347db70a12265b80e8e38c56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skinnyvans-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b640328fee2106b3dea2217776fa00ee07982e485871045f8e3be307311062d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dev.voltstro.unitywebbrowser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69add9c69f66a9fa7c5f3de6fa791fb0fe2f072260ad4786afe153bb26087943 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.ml-agents (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfceda90642153626d064813e4c0c601ca81d18a6c5fd9e96855cbdee511db13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4125 Malicious code in sdkss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f46cdba3fb83ff72cb7127859fb5140d6fc6f8ed207f45919c5c64bc494f3097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rpc-selfbottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c64c2b69b111e1ddfc8dc99d780ac832b4148262e160c4f68270f30c5edd33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nestjs-translator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0ceb5fa1318b74c2003c389bed9724f792a9755ee095548718c1aaead2bbaaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3886 Malicious code in fb-error (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0508c19ea3b1a69283368c7abdee9f8cfdc4980c85582dbf3573b9db71328932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...