MAL-2025-41289 Malicious code in health-cards-validation-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83454ca0e6e018fdcd3684ad0e163a9220a0e5a2619ea5d348092076d83755e5 The OpenSSF Package Analysis project identified 'health-cards-validation-sdk' @ 99.0.9 npm as malicious. It is considered malicious because: - T...

Malicious code in mayfly-risk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf5840ba1f15b80e436a6737d86e95ddd24c73704e5895a2d43056f85394bd45 The OpenSSF Package Analysis project identified 'mayfly-risk' @ 10.13.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41277 Malicious code in donuts.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd852600a317ae1df99af9e6cede53d3f54d36b9a400ca672eff6a7146818a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41371 Malicious code in bc-compare (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bc-compare (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41405 Malicious code in react-event-tracker1 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41404 Malicious code in react-event-tracker-dpdpoc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41368 Malicious code in api-react128 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41367 Malicious code in api-react127 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41361 Malicious code in ad-react-wrapper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dec7199df8eaf35c70facf6df3af78b3aa9b7d06d5cc4f2ba7ee9f528165d21a Any computer that has this package installed or running should be considered...

Malicious code in api-react123 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in cwl_shared (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41378 Malicious code in cwl_shared (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in package-level-3 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @navify-platform/http (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-41357 Malicious code in @navify-platform/http (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @navify-platform/env (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-41355 Malicious code in @navify-platform/env (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-41354 Malicious code in @navify-platform/auth (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in kaltura-player-js (npm)

The package communicates with a domain associated with malicious activity...