MSC-2025-8045

@nativescript-community/ui-material-core package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8044

@nativescript-community/ui-material-core package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8042

@nativescript-community/ui-material-core package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8043

@nativescript-community/ui-material-core package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8039

@nativescript-community/ui-material-core-tabs package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8034

@nativescript-community/ui-material-core-tabs package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8035

@nativescript-community/ui-material-core-tabs package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8032

@nativescript-community/ui-material-core-tabs package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8033

@nativescript-community/ui-material-core package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

MSC-2025-8036

@nativescript-community/ui-material-core-tabs package was compromised to include malicious code that steals github secrets, using them to create malicious github actions workflows that help exfiltrate even more github secrets. Besides, the malicious code also uses a data collection endpoint using...

Malware in @nativescript-community/ui-material-core-tabs

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47158 Malicious code in @nativescript-community/ui-material-core-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e43f7ab3687acb4775d0c018af848b2f959bafdfaa3556f42b4c67778254450 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47157 Malicious code in @nativescript-community/ui-material-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe208e03b1176bddeb8912705cd3294928ff3009cc5c7e98d9495dfd695feea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @nativescript-community/ui-material-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...