MAL-2025-6827 Malicious code in mda-localise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 613478d63b9c28c110cb883d28d216af5ac0cc3af224415eafe463a905b391c3 The OpenSSF Package Analysis project identified 'mda-localise' @ 0.0.2-placeholder npm as malicious. It is considered malicious because: - The...

MAL-2025-6826 Malicious code in microsoft-bonsai-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f75eaf29b0dbada65bcac01f3d2789298d785098ab86d180232abf37a1e16070 The OpenSSF Package Analysis project identified 'microsoft-bonsai-api' @ 9.9.9 npm as malicious. It is considered malicious because: - The packa...

AVEVA PI Integrator

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, or upload and execute files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...

Malicious code in tiktok-internal (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6860 Malicious code in tiktok-internal (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in mgtyler (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in gridlock-web (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6840 Malicious code in gridlock-web (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in zylker-eclassifieds-ui (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in localeslice (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6861 Malicious code in zstd-jni (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in zstd-jni (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in exoscale (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-6823 Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

Researchers Spot Surge in Erlang/OTP SSH RCE Exploits, 70% Target OT Firewalls

Malicious actors have been observed exploiting a now-patched critical security flaw impacting Erlang/Open Telecom Platform OTP SSH as early as beginning of May 2025, with about 70% of detections originating from firewalls protecting operational technology OT networks. The vulnerability in questio...

Google Android TV has an unspecified vulnerability

Google Android TV is a television operating system application from the American company Google Google. Google Android TV suffers from a security vulnerability that can be exploited by an attacker that may result in arbitrary activity being initiated...

MAL-2025-6816 Malicious code in teste-depenconfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56a7fcb8d17544bc05d4a5222d7741781d9b33d6ad5d334d6c74b8851d20a257 The OpenSSF Package Analysis project identified 'teste-depenconfu' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6849 Malicious code in newrelics-scheduler (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3486e95cd25ff7754e4027cbfa4d4e8fff553cc460471594141914a5d697fb8a The OpenSSF Package Analysis project identified 'newrelics-scheduler'...

Malicious code in c-monitor-dashboard (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac5ace2c2268c16914bea284713d9bf69f2414d204cb79d4f32d8aa434b4eb The OpenSSF Package Analysis project identified 'c-monitor-dashboard'...