Malicious code in uprove-node-reference (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41312 Malicious code in msalv2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca3fbaf2aacbd857c8661a88233c1a756fd75c6f60d675a32374d9c95cc019e The OpenSSF Package Analysis project identified 'msalv2' @ 99.0.9 npm...

MAL-2025-41313 Malicious code in oracle-agent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9d5212e69633af1e55a9b35fa8e007e2b50c2905c3549e44f047e8ab061e157 The OpenSSF Package Analysis project identified 'oracle-agent' @ 99.0...

Malicious code in package-extractor-test-03 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f546d25f789caac055c54a1973c81e1df6ce7b9aa1f11b33f42f8a3612a7652d The OpenSSF Package Analysis project identified...

Malicious code in knowledge-processor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10486375c2c8f9c47bdb66e84e96db62dd623c210713201b53ebd516834bf3e6 The OpenSSF Package Analysis project identified 'knowledge-processor' @ 99.0.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in heft-storybook-react-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aaa15f8740a436b59266355d59bb470dfd605d6260dc307a40ef50e20f65939 The OpenSSF Package Analysis project identified 'heft-storybook-react-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...

Malicious code in heft-minimal-rig-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0a085da2f08feb8c00f2c512e03267a7ecdf55cb417d1d0cdb1f663604f95119 The OpenSSF Package Analysis project identified 'heft-minimal-rig-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in invalid-polyfill-boundary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0fbf998b1c11f6a785806e2ab4f0bbbc4da9a95e803f643a497d41215484a11d The OpenSSF Package Analysis project identified 'invalid-polyfill-boundary' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in examples-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 518ba4bb1adf28c3721d2c8ff48d014ef14b3672e262a2f6eaa8acbe3a8f0823 The OpenSSF Package Analysis project identified 'examples-lib' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41286 Malicious code in eslint-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b6f571e9facdadc164a1e0a5ed2a298a233bbc3138ef7df78bae9d0a3d588a4 The OpenSSF Package Analysis project identified 'eslint-9' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in azure-ai-foundry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6397746f8f17f740ba33999b71f8e214096f472aaa54614d8603deeb72435c8 The OpenSSF Package Analysis project identified 'azure-ai-foundry' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41278 Malicious code in agent-dispatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70fbbe88de41579cb87272460bf1eba133ca58f846a3ba16dc9182202c03dd6a The OpenSSF Package Analysis project identified 'agent-dispatcher' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in api-extractor-lib4-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 659516491da5eda94919af0b09a941720c55632d3a7c3ced84c056da49b4e504 The OpenSSF Package Analysis project identified 'api-extractor-lib4-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-41276 Malicious code in cookie.gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e19257a4725688794de5a9df6b822ce9a41431ddf4893202ce50a400175d4be2 The OpenSSF Package Analysis project identified 'cookie.gulp' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in tombac-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3cbbd454182b1e77985f474c87e277b8b0e4efa49cc80edb90c60f7d3a12914 The OpenSSF Package Analysis project identified 'tombac-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41402 Malicious code in r00tsid (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in r00tsid (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41371 Malicious code in bc-compare (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41404 Malicious code in react-event-tracker-dpdpoc (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @listr1/prompt-adapter-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c9103dcee0afbfa63c69bae22ac8f4e415daef3fcb2610b84d8278b1732f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...