MAL-2025-6886 Malicious code in solana-spl-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abc65f4de1b50248d903c79cb67ac016c8da464314e5830c70dbe0a1140503a9 The OpenSSF Package Analysis project identified 'solana-spl-sdk' @ 0.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @capacitor-bmo/biometric (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31e5db1d24cb68dbd291a2dc917c13515b048d4ae58196d9a921d4fea7382316 The OpenSSF Package Analysis project identified '@capacitor-bmo/biometric' @ 9999.0.1 npm as malicious. It is considered malicious because: - Th...

MAL-2025-6884 Malicious code in @capacitor-bmo/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73144f96ecbe009cff465503e7a7c8d70408d0a85196d3b8faefbd6809a731e8 The OpenSSF Package Analysis project identified '@capacitor-bmo/common' @ 99.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in web-bluetooth-spp-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bdbd2a9a0d851f1dae6e50f3c00e0b0839441f59b05d4e49f753afe278cd0ca9 The OpenSSF Package Analysis project identified 'web-bluetooth-spp-application' @ 2.0.1 npm as malicious. It is considered malicious because: -...

MAL-2025-6879 Malicious code in @yaqiguo/dnstest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3478ba78740bef836d1172c597de70dda1774f80ed7d9c3b8273dc9fbc9db71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Pushing the Limits of Frequency Analysis in Leakage Abuse Attacks

Searchable encryption SE is the most scalable cryptographic primitive for searching on encrypted data. Typical SE constructions often allow access-pattern leakage, revealing which encrypted records are retrieved in the server's responses. All the known generic cryptanalyses assume either that the...

MAL-2025-6902 Malicious code in @goes-funky/y42-vscode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f2e0a98abbd9d80612a2ceffc06aac69b23dd12331094d9588992d8789631cf4 The OpenSSF Package Analysis project identified...

Malicious code in oscar-db9-project (npm)

The package oscar-db9-project was found to contain malicious code...

MAL-2025-29888 Malicious code in project-6aeoa-honeydew (npm)

The package project-6aeoa-honeydew was found to contain malicious code...

Malicious code in echo-hotel-quue (npm)

The package echo-hotel-quue was found to contain malicious code...

Malicious code in @erboladaiteas/quam-quo-asperiores (npm)

The package @erboladaiteas/quam-quo-asperiores was found to contain malicious code...

Malicious code in waterfall-yucca-fww745-project (npm)

The package waterfall-yucca-fww745-project was found to contain malicious code...

Malicious code in promise-cron-key-sudo-analyze (npm)

The package promise-cron-key-sudo-analyze was found to contain malicious code...

Malicious code in @funnel-analysis/isengard-client (npm)

The package @funnel-analysis/isengard-client was found to contain malicious code...

MAL-2025-23649 Malicious code in jasmine-waterfall-iqc218-project (npm)

The package jasmine-waterfall-iqc218-project was found to contain malicious code...

MAL-2025-7979 Malicious code in @funnel-analysis/isengard-client (npm)

The package @funnel-analysis/isengard-client was found to contain malicious code...

MAL-2025-30731 Malicious code in promise-cron-key-sudo-analyze (npm)

The package promise-cron-key-sudo-analyze was found to contain malicious code...

MAL-2025-16089 Malicious code in bravo-9gz-project (npm)

The package bravo-9gz-project was found to contain malicious code...

MAL-2025-6876 Malicious code in responsive-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afdda2858edbdcc921f3ba82cbd2e348994eb5d31b6a87f4487dd774ee554f7 The OpenSSF Package Analysis project identified 'responsive-dashboard' @ 2.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-6873 Malicious code in adobe-helix-rum-enhancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47e5b1e8c964526ea266344bff394d02083744b3bcce422729b60b047c005157 The OpenSSF Package Analysis project identified 'adobe-helix-rum-enhancer' @ 99.99.100 npm as malicious. It is considered malicious because: - T...