MAL-2025-47103 Malicious code in snapshot-vks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e927fc13301b02ce43be0a04b2937f258104c6daae954507111b28a5cb67a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BIT-KYVERNO-2023-47630 Attacker can cause Kyverno user to unintentionally consume insecure image

Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest of images used by Kyverno users. The issue would require the attacker to compromise the registry that the Kyverno users fetch their images from. The attacker could then...

Malicious code in tailwind-classname-overrides (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 778af8e6403754b5650e5c08f6d16458ed8399f7cb2886350369e04ac242e07f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47110 Malicious code in @aledade-org/dsi (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9097b2177de180fece5d0c6bcc6c630315777466732e173c20ca8b22bdd24dc0 Any computer that has this package installed or running should be considered...

MAL-2025-47070 Malicious code in hubmabels (npm)

The package hubmabels was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63ce5bde998604e80498a1f950aa6e92745b3011c1826f35e2e431b081b2a837 Any computer that has this package installed or running should be considered fully compromised...

Malicious code in hubmabels (npm)

The package hubmabels was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63ce5bde998604e80498a1f950aa6e92745b3011c1826f35e2e431b081b2a837 Any computer that has this package installed or running should be considered fully compromised...

MAL-2025-47077 Malicious code in mockupnul (npm)

The package mockupnul was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b4708b8e8ad3a0cbe662813ec6e76bb95f4125dc77a98dc1c39f4c5ae95321b Any computer that has this package installed or running should be considered fully compromised...

Malicious code in @google_cloud/projectify (npm)

The package @googlecloud/projectify was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348dd9384a1e11bd9559bcdb3d4e2ef98ad16da2967df02ad4b6764b8d9ef2af Any computer that has this package installed or running should be considered ful...

Malicious code in @google_cloud/precise-date (npm)

The package @googlecloud/precise-date was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fe210b8cac7607562aceba7accb395f7d72480112abadec2545c8863f9029ac Any computer that has this package installed or running should be considered...

Malicious code in jsonjoy.com (npm)

The package jsonjoy.com was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84ed9a921baae45f95050be87e9143e6c63cde1254639e1a9e4a1eb768724f13 Any computer that has this package installed or running should be considered fully...

MAL-2025-47030 Malicious code in @google_cloud/projectify (npm)

The package @googlecloud/projectify was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348dd9384a1e11bd9559bcdb3d4e2ef98ad16da2967df02ad4b6764b8d9ef2af Any computer that has this package installed or running should be considered ful...

MAL-2025-47073 Malicious code in jsonjoy.com (npm)

The package jsonjoy.com was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84ed9a921baae45f95050be87e9143e6c63cde1254639e1a9e4a1eb768724f13 Any computer that has this package installed or running should be considered fully...

MAL-2025-47055 Malicious code in cornerstone_ui_core (npm)

The package cornerstoneuicore was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76275d4480426c8c60d2ef0233c3df0f042494623872c889c0e28d2212b949fe Any computer that has this package installed or running should be considered fully...

Malicious code in sos-angular (npm)

The package sos-angular was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947f0382e3c9c40540c29eda0d55e93d15e9f5c4d9689da2113d9693c2554742 Any computer that has this package installed or running should be considered fully...

Malicious code in crew-toolbox (npm)

The package crew-toolbox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814628864e80153a94f63be13a31cda738fad89160a114cb24559afb0fdbf60f Any computer that has this package installed or running should be considered fully...

MAL-2025-47088 Malicious code in sos-angular (npm)

The package sos-angular was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947f0382e3c9c40540c29eda0d55e93d15e9f5c4d9689da2113d9693c2554742 Any computer that has this package installed or running should be considered fully...

MAL-2025-47089 Malicious code in sos-models (npm)

The package sos-models was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7171745aec44dc0f96e3426f39966e6f22281703919bc10a7a161efef9b928cf Any computer that has this package installed or running should be considered fully compromise...

Malicious code in publicrepouixxe (npm)

The package publicrepouixxe was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65248ca389c569426d0971808eab156c6812f4652e1a2a2c124f6e31cfb0da5 Any computer that has this package installed or running should be considered fully...

Malicious code in mrxfunc (npm)

The package mrxfunc was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb9cfc2b0a29b36b5af2f98f46dd185fbc85b229af1caa19e048ef032ed0c51c Any computer that has this package installed or running should be considered fully compromised...

MAL-2025-47079 Malicious code in mrxfunc (npm)

The package mrxfunc was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb9cfc2b0a29b36b5af2f98f46dd185fbc85b229af1caa19e048ef032ed0c51c Any computer that has this package installed or running should be considered fully compromised...