10946 matches found
Malicious code in msal-node2 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41394 Malicious code in msal-node2 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41393 Malicious code in msal-node1 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41418 Malicious code in umaaas-api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cec98abf15f63bd69dc44f75e78cdab2f723a55c247ccb4ca535421407062c18 Any computer that has this package installed or running should be considered...
Malicious code in memory-providers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d2910b2a9c4078e4f408b3f3a1685db38653402bd9f39577a9811f7dbffe3d3a The OpenSSF Package Analysis project identified 'memory-providers' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41303 Malicious code in knowpro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4050d9edab117029be58467368808cdb539f5d3b4dee8741011d5186c7c74766 The OpenSSF Package Analysis project identified 'knowpro' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in health-cards-validation-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83454ca0e6e018fdcd3684ad0e163a9220a0e5a2619ea5d348092076d83755e5 The OpenSSF Package Analysis project identified 'health-cards-validation-sdk' @ 99.0.9 npm as malicious. It is considered malicious because: - T...
MAL-2025-41289 Malicious code in health-cards-validation-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83454ca0e6e018fdcd3684ad0e163a9220a0e5a2619ea5d348092076d83755e5 The OpenSSF Package Analysis project identified 'health-cards-validation-sdk' @ 99.0.9 npm as malicious. It is considered malicious because: - T...
Malicious code in mayfly-risk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf5840ba1f15b80e436a6737d86e95ddd24c73704e5895a2d43056f85394bd45 The OpenSSF Package Analysis project identified 'mayfly-risk' @ 10.13.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41277 Malicious code in donuts.node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd852600a317ae1df99af9e6cede53d3f54d36b9a400ca672eff6a7146818a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-34546
Name of the Vulnerable Software and Affected Versions: IBM Integrated Analytics System versions 1.0.0.0 through 1.0.30.0 Description: The software allows an authenticated user to upload files with dangerous types. If opened by another user, these files could lead to code execution. Recommendation...
Malicious code in bc-compare (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41371 Malicious code in bc-compare (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41405 Malicious code in react-event-tracker1 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41404 Malicious code in react-event-tracker-dpdpoc (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41368 Malicious code in api-react128 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41367 Malicious code in api-react127 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41361 Malicious code in ad-react-wrapper (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dec7199df8eaf35c70facf6df3af78b3aa9b7d06d5cc4f2ba7ee9f528165d21a Any computer that has this package installed or running should be considered...