MAL-2025-47290 Malicious code in @ui-ux-gang/devextreme-rpk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc643d20a812778984d46636db2ea2e7e08c97ca2710b212c0b07a023461df59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cordova-voxeet (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1676479832addfef5e0aefebfbae1411cfbbdc3dffd7926f497d13a36313efb Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in create-hest-app (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4f8a7c74b24a78d61a35d81d643117f524f843b425f34d281012f7ab8632868 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in jumpgate (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97bb9f6eba8030517cfb22f10da2b5f5d7b4c04faa1168e2fb713c030b3f7b95 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in airpilot (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 846d44d22101abc0b31169c4961dd524b15c20769cbc74a19e2119c6db6e174a Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in capacitor-notificationhandler (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f48b8279ed29432862fc6a0e1baa55481494de62d45c143694c11b696b235e Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @yoobic/yobi (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f973d949e3a5ae002289cfd3e93009c3a8122535b1f75f0363bd8e2c04a2548 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in capacitorandroidpermissions (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4db1dacd688bba52c2c6768ed56310450482ba27cf25b23de8a664943712b40d Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in voip-callkit (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a734b4465eca2576dd3250f97ed37e8537b32d73d0b45adc3bca41bdd52c633c Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @nexe/config-manager (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22a78a7d10a59f7a2928448f3166f83de5443650d498bd687751f36688e87c5d Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @tnf-dev/mui (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e45bfa0b3e9c8d62f8156ce36fdba553ac173d52797fe4ddaf4ffd6f447bde4 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in mstate-cli (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11586d24fddd11300bc40be887923b1983656f46ab1e3d4b282e5b2528b6762a Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in ngx-ws (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95fb4f437cc6a86277edcd8e45410d2cab05e8d357ee942684097ef28c221977 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in mcp-knowledge-graph (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e385978fdd606a1cfafadbcf800ed35523992d9a683305fcca51a6f12ea8b0f Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @nativescript-community/ui-document-picker (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 46d11dbb6f2ddb5b46be5e63a827af98e3f887baac9c3df11be485d8326089b2 This package was compromised by the Shai-Hulud NPM worm. The malicious payload steal...

Malicious code in mstate-react (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 997c10662d47fa55ca8cd4db612274bf4d589c7d82d079b48fae3261bb5c65a7 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in pm2-gelf-json (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9729db241544847eced07c28de82e8cd2a4432b69f44d56de0289ab621fc1492 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @art-ws/db-context (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72aeba541e18c7562da7a71bea780fecdb34e6a64f033ee26245d2349ca786df Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @operato/graphql (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 384e37db905cd0ec8af48ff1600e883c67419251b1fd354571b151471105d4d3 Any computer that has this package installed or running should be considered fully compromised. All...

Malicious code in @ahmedhfarag/ngx-virtual-scroller (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66057cb43184c7c2694b0d4a8dad8c0566a4e2aa2395e63b96637dcef1455ef3 Any computer that has this package installed or running should be considered fully compromised. All...