Malicious code in handoffs (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in so-demo (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6123 Malicious code in realtime-next (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in test-package-avinav (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db665678ac908b6f9aa76ef069759ebd70b62c901a6f840b765ba7cac299c423 During installation, a heavily obfuscated code is executed. Exact behaviour unclear --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in tw-core-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb17ff1202bd8522ed8a37591dc22da8c39ed2554771c3566b2ac7d4e356f2 Any computer that has this package installed or running should be considered...

Malicious code in matka (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6117 Malicious code in preview-server-auth-bounty (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5816 Malicious code in os-apps-ui-placement-manager (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6184 Malicious code in nbastatsleftnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514ea2a983874eb46d5517a63e127b2503b1f9a0dc1ffa0a726e5f1dbd7559b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @blocks-shared/atom-panel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c591a20fbe6de7639db5ac559fbc7db95960967fb3eb809e6fe2f58943f4a75 The OpenSSF Package Analysis project identified...

MAL-2025-5757 Malicious code in os-apps-ui-traffic-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cdf3d7006b0b2cb524eb3e2fb401636a3a58bd02e1f9296ba89d576397b8831f The OpenSSF Package Analysis project identified...

MAL-2025-5809 Malicious code in dep-confusion-poc-monke (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5eadc84c6eaa4f7eb92319cac88bbe0057e1eb86646846287104d5d7d8f9c0 Any computer that has this package installed or running should be considered...

Delta Electronics DTM Soft

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to encrypt files referencing the application in order to extract information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

MAL-2025-5755 Malicious code in tutorial_front (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c37adc01a1128e0458364194c6aae8faaeb4f5ce55cfe0aee587ea5d5fc751 Any computer that has this package installed or running should be considered...

Malicious code in bugsnag-plugin-react (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in actions-experiment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3571367d4274d4ca5d5c2cd7b400c40b4d656c2c58fb0746e8372cb24910c5b The OpenSSF Package Analysis project identified 'actions-experiment' ...

CVE-2025-36600

creationtimestamp| type| source ---|---|--- 2025-07-08 14:29:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818085049521205 2025-07-08 14:29:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114818085811410163 2025-07-08 16:28:12+00:00| seen|...

Malicious code in laredoute (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in rambler-id (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d88b84167baafecc35066da4403daf40828ae3e5e178b06cb0d27c85670839c The OpenSSF Package Analysis project identified 'rambler-id' @ 91.9.9...

MAL-2025-5657 Malicious code in rambler-id (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d88b84167baafecc35066da4403daf40828ae3e5e178b06cb0d27c85670839c The OpenSSF Package Analysis project identified 'rambler-id' @ 91.9.9...