Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in design-system-components-angular-workspace (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41967 Malicious code in design-system-components-angular-workspace (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bps-react-design-system (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41372 Malicious code in bps-react-design-system (npm)

The package communicates with a domain associated with malicious activity...

Security Bulletin: Carbon design system packages

Summary Various packages are vulnerable to multiples CVEs and can be resolved by updating to [email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected]....

Malicious code in yarn-design-system-react-components (npm)

The package yarn-design-system-react-components was found to contain malicious code...

MAL-2025-9329 Malicious code in @snapon/design-system-react (npm)

The package @snapon/design-system-react was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in snap-design-system (npm)

The package snap-design-system was found to contain malicious code...

Malicious code in vue-design-system (npm)

The package vue-design-system was found to contain malicious code...

Malicious code in yarn-design-system (npm)

The package yarn-design-system was found to contain malicious code...

Malicious code in yarn-design-system-ag-grid (npm)

The package yarn-design-system-ag-grid was found to contain malicious code...

Malicious code in yarn-design-system-icons (npm)

The package yarn-design-system-icons was found to contain malicious code...

Malicious code in yarn-design-system-jsdoc-template (npm)

The package yarn-design-system-jsdoc-template was found to contain malicious code...

Malicious code in yarn-design-system-icons-ce-c (npm)

The package yarn-design-system-icons-ce-c was found to contain malicious code...

Malicious code in yarn-design-system-rc-slider (npm)

The package yarn-design-system-rc-slider was found to contain malicious code...

Malicious code in yarn-design-system-react-components-ce-c (npm)

The package yarn-design-system-react-components-ce-c was found to contain malicious code...

Malicious code in yarn-design-system-swiper (npm)

The package yarn-design-system-swiper was found to contain malicious code...

Malicious code in @snapon/design-system-react (npm)

The package @snapon/design-system-react was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-40337 Malicious code in yarn-design-system-ag-grid (npm)

The package yarn-design-system-ag-grid was found to contain malicious code...