MAL-2025-41304 Malicious code in knowpro-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c8dc0e73cf498b9479d7045fd9cea3dc3db6ef7ca2ada5316282da6a97ed805 The OpenSSF Package Analysis project identified 'knowpro-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41302 Malicious code in knowledge-processor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10486375c2c8f9c47bdb66e84e96db62dd623c210713201b53ebd516834bf3e6 The OpenSSF Package Analysis project identified 'knowledge-processor' @ 99.0.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in heft-storybook-react-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aaa15f8740a436b59266355d59bb470dfd605d6260dc307a40ef50e20f65939 The OpenSSF Package Analysis project identified 'heft-storybook-react-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...

MAL-2025-41292 Malicious code in heft-example-plugin-02 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f52fccc098ff9fe7c2f46b5653ed058f4f080380c5de5ab9943c413c30f1ee8 The OpenSSF Package Analysis project identified 'heft-example-plugin-02' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-41298 Malicious code in image-memory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad268d8e5d26e3c122a979160b815c349dc3cd4d22004530c3a5ca5c4299a9 The OpenSSF Package Analysis project identified 'image-memory' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in invalid-polyfill-boundary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0fbf998b1c11f6a785806e2ab4f0bbbc4da9a95e803f643a497d41215484a11d The OpenSSF Package Analysis project identified 'invalid-polyfill-boundary' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in image-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d039c00b9a8017cedcf0b37cf3a3497b17065bfff2570e247e7245fd2f6b5a4f The OpenSSF Package Analysis project identified 'image-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in invalid-polyfill-boolean (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 494509102be194f3de6962a2ed4e22af22ecab01d9fb1c460b2cf0d93c4e6591 The OpenSSF Package Analysis project identified 'invalid-polyfill-boolean' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in heft-example-plugin-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 38de8533a1fa4ae454f1c4c690239b429820ddf54aa69925be16c418d54f6a2b The OpenSSF Package Analysis project identified 'heft-example-plugin-01' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-41284 Malicious code in eslint-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc62673366ae7ad1109086b5169030e17b4ed81be6735878522392329ebca48c The OpenSSF Package Analysis project identified 'eslint-8' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41273 Malicious code in parabol-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74ca7b873b936a65f847ef390b0cbe34ceb97ba32b0153888623b60c61f4b335 The OpenSSF Package Analysis project identified 'parabol-client' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in tombac-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3cbbd454182b1e77985f474c87e277b8b0e4efa49cc80edb90c60f7d3a12914 The OpenSSF Package Analysis project identified 'tombac-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41272 Malicious code in tombac-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3cbbd454182b1e77985f474c87e277b8b0e4efa49cc80edb90c60f7d3a12914 The OpenSSF Package Analysis project identified 'tombac-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Towards Principled Analysis and Mitigation of Space Cyber Risks

Space infrastructures have become an underpinning of modern society, but their associated cyber risks are little understood. This Dissertation advances the state-of-the-art via four contributions. i It introduces an innovative framework for characterizing real-world cyber attacks against space...

MAL-2025-41270 Malicious code in react-markdown-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb4130aead07e462025fb467846b74aa4c38639038c68e74114f27e34ede57b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41268 Malicious code in api-react125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d2f6ad3f3d48477a940b0ade2ae623d9001486fb2dee5c4f448fa429a9165879 The OpenSSF Package Analysis project identified 'api-react125' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MixGAN: a Hybrid Semi-Supervised and Generative Approach for DDoS Detection in Cloud-Integrated IoT Networks

The proliferation of cloud-integrated IoT systems has intensified exposure to Distributed Denial of Service DDoS attacks due to the expanded attack surface, heterogeneous device behaviors, and limited edge protection. However, DDoS detection in this context remains challenging because of complex...

MAL-2025-41262 Malicious code in fb_helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd02d94679b40d95c81b651a29666a45452deabc83d8e33032104032eef13261 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41275 Malicious code in tanstack-virtual-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b38d98c47aceac75b944aff9d0df30a563d89aaa076329820aa58b119e010448 The OpenSSF Package Analysis project identified 'tanstack-virtual-cor...

MAL-2025-41263 Malicious code in sdp-transform-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f0bf5deb53b6f1424914462ad86d16738a1118a744d709e3e37abaf8907134 The OpenSSF Package Analysis project identified 'sdp-transform-parser...