585 matches found
Malicious code in @goes-funky/y42-vscode (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f2e0a98abbd9d80612a2ceffc06aac69b23dd12331094d9588992d8789631cf4 The OpenSSF Package Analysis project identified...
MAL-2025-6902 Malicious code in @goes-funky/y42-vscode (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f2e0a98abbd9d80612a2ceffc06aac69b23dd12331094d9588992d8789631cf4 The OpenSSF Package Analysis project identified...
Malicious code in vscode-import-sort (npm)
The package vscode-import-sort was found to contain malicious code...
Malicious code in vscode-extend (npm)
The package vscode-extend was found to contain malicious code...
Malicious code in vscode-antlr4 (npm)
The package vscode-antlr4 was found to contain malicious code...
Malicious code in vscode-notebook-renderer (npm)
The package vscode-notebook-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 065f8a29b916aea70aa9f29ac9cde574ebd734c0cd450699387684aa7e3d60fa This package installs a dependency hosted on a custom domain tha...
Malicious code in aws-core-vscode (npm)
The package aws-core-vscode was found to contain malicious code...
Malicious code in ms-azuretools.vscode-azureresourcegroups (npm)
The package ms-azuretools.vscode-azureresourcegroups was found to contain malicious code...
Malicious code in forge-vscode (npm)
The package forge-vscode was found to contain malicious code...
Malicious code in vscode-reh (npm)
The package vscode-reh was found to contain malicious code...
Malicious code in vscode-mssql (npm)
The package vscode-mssql was found to contain malicious code...
MAL-2025-38654 Malicious code in vscode-notebook-renderer (npm)
The package vscode-notebook-renderer was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 065f8a29b916aea70aa9f29ac9cde574ebd734c0cd450699387684aa7e3d60fa This package installs a dependency hosted on a custom domain tha...
MAL-2025-38655 Malicious code in vscode-reh (npm)
The package vscode-reh was found to contain malicious code...
MAL-2025-20779 Malicious code in forge-vscode (npm)
The package forge-vscode was found to contain malicious code...
MAL-2025-38652 Malicious code in vscode-import-sort (npm)
The package vscode-import-sort was found to contain malicious code...
MAL-2025-38650 Malicious code in vscode-antlr4 (npm)
The package vscode-antlr4 was found to contain malicious code...
Malicious code in vscode-kubernetes-tools (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6779 Malicious code in vscode-kubernetes-tools (npm)
The package communicates with a domain associated with malicious activity...
Malware in vscode-oneapi-environment-configurator
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in vscode-oneapi-environment-configurator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8b4992dcea3340ef6012db58cede2756b194c824f67c49b3ebae3b30a9b946c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...