10116 matches found
Malicious code in @mz-codes/const (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @wp-feature-api/client-features (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in canvas-ios (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41426 Malicious code in @navancorp/icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d23863df2bb18ff4d7478d9d974206ad5e1959e64da8883e6623a5747b4ad3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bitkub-next-frontend-v2/app-bitkub-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c961401f308dd3c2e7d4639158b0b6c5cf92dbdfcafb06789988dc4824107960 The OpenSSF Package Analysis project identified '@bitkub-next-frontend-v2/app-bitkub-next' @ 1.13.0 npm as malicious. It is considered malicious...
MAL-2025-41258 Malicious code in @bitkub-next-frontend-v2/app-bitkub-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c961401f308dd3c2e7d4639158b0b6c5cf92dbdfcafb06789988dc4824107960 The OpenSSF Package Analysis project identified '@bitkub-next-frontend-v2/app-bitkub-next' @ 1.13.0 npm as malicious. It is considered malicious...
Linux Distros Unpatched Vulnerability : CVE-2018-5179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all...
CVE-2019-10089
creationtimestamp| type| source ---|---|--- 2025-08-20 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwud77sjvc2v...
Malicious code in other-external (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4043d62490dcece68def76c783cdadf630e5b72829cffa35283867dfd60ff62 The OpenSSF Package Analysis project identified 'other-external' @ 20.1.1 npm as malicious. It is considered malicious because: - The package...
CVE-2025-49893
creationtimestamp| type| source ---|---|--- 2025-08-20 18:10:57+00:00| seen| Telegram/pgG-2DnRiFPJg4TBpjVwJ4kb-nUG7nFtpLDH8vOQ2DcgH44...
CVE-2025-46962
creationtimestamp| type| source ---|---|--- 2025-08-20 17:10:13+00:00| seen| Telegram/zsRzhhBT9vfS9UBTzDj8VDQBZNihHR34jasv8L-9vdawA...
MAL-2025-41251 Malicious code in @navify-platform/idle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4c05f7983c6a597941a36c8177f63342feee29acb5d3922471e2fa25da4f159 The OpenSSF Package Analysis project identified '@navify-platform/idle' @ 2.3.0 npm as malicious. It is considered malicious because: - The...
MAL-2025-41372 Malicious code in bps-react-design-system (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41388 Malicious code in grab-service-worker (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in f0-service-oas (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41410 Malicious code in testnpm369420 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f95d0c4a710a2f6a2f8a29a9284d21da506dbbd15c745165497b7761275bccd2 The OpenSSF Package Analysis project identified 'testnpm369420' @...
MAL-2025-41245 Malicious code in @cf.cplace.platform/forms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be4ed03fbd3f41262f582eab6a80ae6e67fe611301ef8cf9558555a0add3af9 The OpenSSF Package Analysis project identified '@cf.cplace.platform/forms' @ 9.1.99 npm as malicious. It is considered malicious because: - The...
MAL-2025-41401 Malicious code in ptv_uxreadspropvt (npm)
The package communicates with a domain associated with malicious activity...