12907 matches found
Malicious code in internal-random (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amdocs-core-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...
Malicious code in playwright-config-pdffiller (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6671 Malicious code in @usaa-grp-payments-web-experience/bk-acknowledge-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b56c4b39f3ee1932940e85cef9f0071fc46b948628c13f5588bd484de40ab42d The OpenSSF Package Analysis project identified '@usaa-grp-payments-web-experience/bk-acknowledge-module' @ 2.9.11 npm as malicious. It is...
Malicious code in eslint-config-pdffiller-typescript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd433611287b0e5010c855eaeac600cc58e87febefac7a8fdcb27568a25d29f2 The OpenSSF Package Analysis project identified 'eslint-config-pdffiller-typescript' @ 999.0.0 npm as malicious. It is considered malicious...
Malicious code in azuresdkpackagelist (npm)
The package communicates with a domain associated with malicious activity...
Pearcleaner 安全漏洞
Pearcleaner is a mac application cleaner tool by the individual developer Alin Lupascu. A security vulnerability exists in Pearcleaner versions 4.4.0 through 4.5.1, which stems from the XPC service exposing the Execute Arbitrary Command method, which could lead to elevation of privilege...
Malicious code in nubank-www-latam-commons (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ef98f115341b4b410449098489bee4471969a706dfe619a9d7704d26fa5a1f The OpenSSF Package Analysis project identified...
Malicious code in subchart (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6682 Malicious code in epic-games-nav-share (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5c0876d33c9155274a0eaba4f29d9351f9cfa32ddf6363ae74258d56185de63 Any computer that has this package installed or running should be considered...
Malicious code in sentry-core (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in weavejs-backend (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6762 Malicious code in spendesk (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in tms-spike (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in mpesa-ui-components (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in docusaurus-theme (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in reference-library (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in build-angular (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in internal-pkg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6349 Malicious code in inditextech (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 455c80b36b4b1ba97172a5cd0ebbe04c6b7fd35f405aeaa3d570ae77522dc433 The OpenSSF Package Analysis project identified 'inditextech' @ 10.0.3 npm as malicious. It is considered malicious because: - The package...