MAL-2025-5298 Malicious code in prototype-poisoning-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7e50b04c4ffcf207fdb21b54873ca1488fe7dd526b90c1206bc830af9b111b Any computer that has this package installed or running should be considered...

MAL-2025-5320 Malicious code in natel-plotly-panel (npm)

The package contains suspicious preinstall, preupdate, and test scripts in pakage.json that download and execute code from a remote server oastify.com. This allows for arbitrary code execution and exfiltration of sensitive information username, path, hostname during installation, update, and...

MAL-2025-5296 Malicious code in i-just-love-bananas-dont-mind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23aa7188231dd22eb43f4fbc309dbeec0c8d18b512111786fb8e61c70e65b993 The OpenSSF Package Analysis project identified 'i-just-love-bananas-dont-mind' @ 1.0.2 npm as malicious. It is considered malicious because: -...

Unveiling RIFT: Enhancing Rust malware analysis through pattern matching

Today, Microsoft Threat Intelligence Center is excited to announce the release of RIFT , a tool designed to assist malware analysts automate the identification of attacker-written code within Rust binaries. Known for its efficiency, type safety, and robust memory safety, Rust has increasingly...

Malicious code in validate-rb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7975ebc737a4c604d0d25ee00a187fde74d2442953ec305c57c738ebd4cdedcd The OpenSSF Package Analysis project identified 'validate-rb' @ 1.0.0...

MAL-2025-5294 Malicious code in validate-rb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7975ebc737a4c604d0d25ee00a187fde74d2442953ec305c57c738ebd4cdedcd The OpenSSF Package Analysis project identified 'validate-rb' @ 1.0.0...

MAL-2025-5293 Malicious code in retaillocationserv-paypal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0409d54039e50835f5e9986281184dc84f53f8c20c6a838505fcd8097c538feb The OpenSSF Package Analysis project identified...

CVE-2025-49321 WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Arraytics Eventin wp-event-solution allows Reflected XSS.This issue affects Eventin: from n/a through = 4.0.28...

Malicious code in nf-cl-loger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ef6d67424e2f4b0f602a07367e287f1764cf98b2d5fb663a5bcef30ed76950f The OpenSSF Package Analysis project identified 'nf-cl-loger' @ 11.0....

MAL-2025-5290 Malicious code in nf-cl-loger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ef6d67424e2f4b0f602a07367e287f1764cf98b2d5fb663a5bcef30ed76950f The OpenSSF Package Analysis project identified 'nf-cl-loger' @ 11.0....

Reliability Analysis of Smart Contract Execution Architectures: a Comparative Simulation Study

The industrial market continuously needs reliable solutions to secure autonomous systems. Especially as these systems become more complex and interconnected, reliable security solutions are becoming increasingly important. One promising solution to tackle this challenge is using smart contracts...

Pseudo-Equilibria, Or: How to Stop Worrying about Crypto and Just Analyze the Game

Whitepaper called Pseudo-Equilibria, Or: How To Stop Worrying About Crypto And Just Analyze The Game...

MAL-2025-5278 Malicious code in codesandbox-deps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8cbaaee48ac510c9d11bc481194ff5a4006d0233d8d2d06a3422628cea6a879 Any computer that has this package installed or running should be considered...

Malicious code in robinhood-internal-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5350c4af558b6036e996982e7ac060be1ac0516b91dfd7b983a5c0b5d76270ec The OpenSSF Package Analysis project identified...

MAL-2025-5312 Malicious code in nordic-dev-ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1745e8aa07b56cf04bc594aa60fb250b98666d7c3c65514c610e4e55b39ec70f Any computer that has this package installed or running should be considered...

Malicious code in undeconf (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 513c9e34a7d02530bdb34fc364d7c5411914263c5960f4a4cc7fa967c3c01f36 Any computer that has this package installed or running should be considered...

MAL-2025-5331 Malicious code in undeconf (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 513c9e34a7d02530bdb34fc364d7c5411914263c5960f4a4cc7fa967c3c01f36 Any computer that has this package installed or running should be considered...

MAL-2025-5325 Malicious code in jira-help-tips (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8b0652aee06598b2ce4f2f215e70f168e2d91b3058832a20069ac391d6a3c0d Any computer that has this package installed or running should be considered...

MAL-2025-5252 Malicious code in myuscis-material (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cba011b86ceb83ee613aceb9c55a91e8aabbb2df8d473962bff0b0c55879ce49 The OpenSSF Package Analysis project identified 'myuscis-material' @...

Malicious code in aws-sdk-react-native-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 626365c8daf9243d0d8281fa741a8537d284b73f873547122f9bdab75513d280 Any computer that has this package installed or running should be considered...