5952 matches found
MAL-2025-49115 Malicious code in epic-alt-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2bda45d847acb3ebf792930ebd351b317ff4d7db1f9ac7bc778843a64ce92db The package epic-alt-utils was found to contain malicious code...
MAL-2025-49156 Malicious code in epic-gulp-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c052f7f555ae651081d7524dbab57753500980d2ef82c6e29da03fe49997ef2 The package epic-gulp-utils was found to contain malicious code...
MAL-2025-49222 Malicious code in epic-webpack-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff282c7ec2d975de64a2b6ff7db19e8cb5b4ab31b1b39d857b7bb9d2f07c8a6 The package epic-webpack-utils was found to contain malicious code...
MAL-2025-49105 Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...
MAL-2025-49141 Malicious code in epic-env-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f94098f216650c7955adfe4a82c23f4368b9cae20abff8da12aa162e4a8e8b4 The package epic-env-utils was found to contain malicious code...
MAL-2025-49140 Malicious code in epic-dynamo-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dfc024cfa20f34e12e97a7d6ec0f046f02a0d692889a85cd69ef4aca80673c The package epic-dynamo-utils was found to contain malicious code...
MAL-2025-49178 Malicious code in epic-path-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4c76f7c877c65c735a8776d058420e4fbacc14e1421fb9900deed947191704 The package epic-path-utils was found to contain malicious code...
MAL-2025-48780 Malicious code in tailwind-utils-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed8ff35970f72cb3baab16f272e85ee20139056fb86d4c04e90b28ba38f464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35795
Malicious code in discord-utils-enhanced npm...
MAL-2025-48878 Malicious code in test-utils-vue3 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in internal-test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14723fa9c85ed09e8669f1e402756b97ce2654f9e2b222a57ca6d539d73afc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in acme-auth-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48787 Malicious code in acme-auth-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in global-utils-helper-2025 (npm)
The package communicates with a domain associated with malicious activity...
Use of Hard-coded Cryptographic Key
Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key for encrypting sensitive configurations when NeuVector stores data. The static key can be used to retrieve configuration data. Remediation Upgrade github.com/neuvector/neuvector/share/utils to version...
Malicious code in ofjaaaah-helper-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c29444c36fe6eb68b1d21e6dfa6d59cd4cdf3477983d56e62b4c92d36d60476 Any computer that has this package installed or running should be considered...
MAL-2025-48749 Malicious code in ofjaaaah-helper-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c29444c36fe6eb68b1d21e6dfa6d59cd4cdf3477983d56e62b4c92d36d60476 Any computer that has this package installed or running should be considered...
Malicious Package
Overview @jdtaro/dynamic-devtools-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious code in @jdtaro/dynamic-devtools-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31153e0cd25bffc9c1582e7fe176e131e49c4a1fdfdc58c55cdf25dcd99a5b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...