10959 matches found
Malicious code in hyperion-react-native-testapp (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dade0de8238a15a0ae8541c47a5178f3234eb654cc6afe58eaf02600ad4d47 package.json declares a preinstall lifecycle script that runs wget at npm...
MAL-2025-6727 Malicious code in hyperion-react-native-testapp (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dade0de8238a15a0ae8541c47a5178f3234eb654cc6afe58eaf02600ad4d47 package.json declares a preinstall lifecycle script that runs wget at npm...
Malicious code in trigger-dev-logger (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in internal-logger-embaby (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in events-web1 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6721 Malicious code in events-web1 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in react-native-at-internet-example (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6784 Malicious code in work-planner-client (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in work-planner-client (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in conformance-test (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6706 Malicious code in conformance-test (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in onboarding-lemonde (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in node-buildpack-test-app (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 853e825cb3a7ee79b6c801ac036e895ab6ef780891a544abe6b9f5c54bdc33b9 The OpenSSF Package Analysis project identified...
MAL-2025-6262 Malicious code in blank-pkg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2f49c661af4e850b4d2aa252c5bdfc2d7409efbbae9396ac2901d0e9fc0f910 The OpenSSF Package Analysis project identified 'blank-pkg' @ 10.0.1...
Malicious code in redux-probe-unknown-action-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d273d8be87dc1aaa71222024d9f545d4ec9bde08234f27b0c9c81f6dd8c86721 The OpenSSF Package Analysis project identified...
Malicious code in redux-replace-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb28c0e340d0d3220c0b6c87681ecdb8ff015040d97ed20852a5fabf651f503d The OpenSSF Package Analysis project identified 'redux-replace-rce' @...
MAL-2025-6248 Malicious code in foundry-jupyter-extension (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8114162af3676e6c75f96e1dc953dae363e41fab4e9b3ce75a84b261aece0113 Installing or importing the module triggers exfiltration of environmental variables --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
MAL-2025-6291 Malicious code in latam-xp-analytics-plugin-absmartly (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6309 Malicious code in scheduler-experimental-builtin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c381d132dddf957ca46bcbb357f4d138089323733e00e65f2e13d7ac84fc23 Any computer that has this package installed or running should be considered...
CVE-2025-38437
creationtimestamp| type| source ---|---|--- 2025-07-25 16:24:10+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lushifr47hx2 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-10-09 18:20:04+00:0...