MAL-2025-5344 Malicious code in sdk.babeltest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb7d26e89ca8ffdb305da3c7bdc066c71640e5a2f046f9172acf6308b4864c9b Any computer that has this package installed or running should be considered...

MAL-2025-5376 Malicious code in category_textured_background (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b79fb63e44acb7b89709ad74956de390dafd2a044dfe4ca90e3759773517a9a Any computer that has this package installed or running should be considered...

CVE-2025-49483

creationtimestamp| type| source ---|---|--- 2025-07-01 12:10:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20020 2025-07-01 12:26:45+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114777968065544988 2025-07-01 13:08:26+00:00| seen|...

Malicious code in microviewsharedwidgets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a0d5ab634b9ee74c4cf591a4cb1b7f151f6f7116e6cd32bcfd80464d278f1df The OpenSSF Package Analysis project identified...

Malicious code in workflows-template (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e1496b26e69a907ccdfa4de45ea382e2c22b156aaa97629f76574f17d12eff2 Any computer that has this package installed or running should be considered...

GHSA-6R2X-8PQ8-9489

creationtimestamp| type| source ---|---|--- 2025-07-01 03:54:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114775953190071346...

Falco 0.41.3

Sysdig Falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco...

MAL-2025-5480 Malicious code in webgl-fingerprinting (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016147915e679ae2b97b3c040f72eb1171882e3785e1ae3aea0765497138c268 Any computer that has this package installed or running should be considered...

MAL-2025-5399 Malicious code in ee_else_ce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1573503c97a28616ebbe0ac70f2124f6761b31b0ead756cc1b9e6a9b4a116127 Any computer that has this package installed or running should be considered...

MAL-2025-5407 Malicious code in example-target-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c527df8a6a7f920a0fd9146bf4a738da075f6430ad4a523d1c345fe4deb26b7 Any computer that has this package installed or running should be considered...

Malicious code in @checkbox-technology-pty-ltd/custom-block-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba31877b88dff4452a6868ad1ecebb0757a820bf7bf3cb5b52205da653a20624 The OpenSSF Package Analysis project identified...

MAL-2025-5315 Malicious code in @checkbox-technology-pty-ltd/custom-block-kit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba31877b88dff4452a6868ad1ecebb0757a820bf7bf3cb5b52205da653a20624 The OpenSSF Package Analysis project identified...

MAL-2025-5313 Malicious code in ardiffact (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f622f1802cccc6f5386792e6d91d4e4292e5f4f601a2662f451ec82db6fffc Any computer that has this package installed or running should be considered...

MAL-2025-5402 Malicious code in epic-mw (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6537e833320c30d33c6e8b2c61927748ebe0fc1066a6b60415d10c2d2470f7c Any computer that has this package installed or running should be considered...

MAL-2025-5411 Malicious code in globals-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95530b4f6700a81e9563fcc03525cb458953b3bfee2504f42e1cd50558a64dcb Any computer that has this package installed or running should be considered...

MAL-2025-5307 Malicious code in side-effects-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82b6dc5cf513223d6d09a04e6a0a1291c7ac2be14c46381e61d023f39c00b8c2 Any computer that has this package installed or running should be considered...

Malicious code in side-effects-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82b6dc5cf513223d6d09a04e6a0a1291c7ac2be14c46381e61d023f39c00b8c2 Any computer that has this package installed or running should be considered...

Malicious code in flag-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 438adadeb667385a6a147b98a62dbe1d6b61e621b47e82afaa959cec99b4a7fe Any computer that has this package installed or running should be considered...

MAL-2025-5308 Malicious code in handlebars-formatter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92136f20fdccfde7498654c464b157e7c0c70bbbeabd511bcfb11e4d3f79a8dc Any computer that has this package installed or running should be considered...

MAL-2025-5443 Malicious code in nodergb-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78a86d286601cf04014b221b8874ef2c2996e5bf707d31143ccefa79e8ab1d40 Any computer that has this package installed or running should be considered...