CVE-2025-43976

The com.enflick.android.tn2ndLine application through 24.17.1.0 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity component...

Malicious code in omulamuzi (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @nytt/sass-utils (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6061 Malicious code in @toptal/picasso-select (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6047 Malicious code in @toptal/picasso-form (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @toptal/picasso-accordion (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @toptal/picasso-image (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6051 Malicious code in @toptal/picasso-image (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6066 Malicious code in @toptal/picasso-typography (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @toptal/picasso-grid (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @toptal/picasso-dropzone (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @toptal/picasso-calendar (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6035 Malicious code in @toptal/davinci-cloudflare-requests-handler (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @toptal/picasso-lab (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6136 Malicious code in wc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0074aa23419396ed1a9fe8acbdb9bac05d585129e3723d4db8a9af9f457096c6 Any computer that has this package installed or running should be considered...

Malicious code in protolab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 395ceb17d3bf331597e101e685532b4af1d732b5ee31005221b0fcae61b97632 The OpenSSF Package Analysis project identified 'protolab' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in groq-mcp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f310f1669db9ce74e36d92085a6a67098f7c0ee086d8da5998b709d565a3fe12 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6095 Malicious code in hg-icons-2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in marcom-ac-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64d378ac078f27f1f0357746b50307c933999c2eb82b5c9c7a7a6b0645910749 The OpenSSF Package Analysis project identified 'marcom-ac-console' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...

MAL-2025-5994 Malicious code in acsascasccsaascascacs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4d29e3ba25b084215e80ac7601a998e66cf11ad88607db37e23fa50817b135 The OpenSSF Package Analysis project identified 'acsascasccsaascascacs' @ 1.0.2 npm as malicious. It is considered malicious because: - The...