10946 matches found
MAL-2025-41372 Malicious code in bps-react-design-system (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41388 Malicious code in grab-service-worker (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in f0-service-oas (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41410 Malicious code in testnpm369420 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f95d0c4a710a2f6a2f8a29a9284d21da506dbbd15c745165497b7761275bccd2 The OpenSSF Package Analysis project identified 'testnpm369420' @...
MAL-2025-41245 Malicious code in @cf.cplace.platform/forms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be4ed03fbd3f41262f582eab6a80ae6e67fe611301ef8cf9558555a0add3af9 The OpenSSF Package Analysis project identified '@cf.cplace.platform/forms' @ 9.1.99 npm as malicious. It is considered malicious because: - The...
MAL-2025-41401 Malicious code in ptv_uxreadspropvt (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in udg-uc-sdk-pds (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41417 Malicious code in udg-uc-sdk-pds (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41391 Malicious code in kibiutils (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41385 Malicious code in gbb-kubernetes-hackfest-webui-dashboard (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41244 Malicious code in hey-message-content (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82160038204459189291779030b0cd92dbe157e779d3b1cae48e25a84053ee9a The OpenSSF Package Analysis project identified 'hey-message-content' @ 8.99.1 npm as malicious. It is considered malicious because: - The packa...
SaMOSA: Sandbox for Malware Orchestration and Side-Channel Analysis
Cyber-attacks on operational technology OT and cyber-physical systems CPS have increased tremendously in recent years with the proliferation of malware targeting Linux-based embedded devices of OT and CPS systems. Comprehensive malware detection requires dynamic analysis of execution behavior in...
Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures
The threat actors behind the Noodlophile malware are leveraging spear-phishing emails and updated delivery mechanisms to deploy the information stealer in attacks aimed at enterprises located in the U.S., Europe, Baltic countries, and the Asia-Pacific APAC region. "The Noodlophile campaign, activ...
Malicious code in flask-tdg-cyberx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...
MAL-2025-191732 Malicious code in flask-tdg-cyberx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d5dae82b81352867ea79466352b02c279be8b7ca2f0415f0534058e20b943436 Package is prepared for exfiltration of detailed data about the running system. The exact behaviour depends on the version: some does nothing, some exfiltrate...
Malicious code in personalizationtrkserv (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e171fa4d76ea31b32b21ec8efae81c75a65d7adcc42a621c06cfd5406110131 The OpenSSF Package Analysis project identified...
Malicious code in react-stickynod (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6952 Malicious code in react-stickynod (npm)
The package communicates with a domain associated with malicious activity...