MAL-2025-6961 Malicious code in symphony-summary (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6870 Malicious code in @angular_devkit/build-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...

Malicious code in dependerable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f710204dca1899f1d3c1289dee4a05e791bfd14fdbe3678e52d4caa62869d816 The OpenSSF Package Analysis project identified 'dependerable' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6863 Malicious code in dependsalotxyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6ff0f63ebfa845053f988e1f56a87392c7ea6f7907895f0551ef3ee32da38fb The OpenSSF Package Analysis project identified 'dependsalotxyz' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6944 Malicious code in mm-scss-utils (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in symphony-hierarchical-confusion-matrix (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6827 Malicious code in mda-localise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 613478d63b9c28c110cb883d28d216af5ac0cc3af224415eafe463a905b391c3 The OpenSSF Package Analysis project identified 'mda-localise' @ 0.0.2-placeholder npm as malicious. It is considered malicious because: - The...

MAL-2025-6826 Malicious code in microsoft-bonsai-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f75eaf29b0dbada65bcac01f3d2789298d785098ab86d180232abf37a1e16070 The OpenSSF Package Analysis project identified 'microsoft-bonsai-api' @ 9.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-6823 Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

Malicious code in sendbird-uikit-sample-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in criteo-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a71052dd6a243d5cbf33f701f287777125ed237e9d9b2e750874fea97a0d7618 The OpenSSF Package Analysis project identified 'criteo-video-player' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-6839 Malicious code in gik2-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6769 Malicious code in thisisthedaventestpoc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in internal-newrelic-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in node-calculator-splo (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in cycalculator-ye51 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in undeface-test-1 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6695 Malicious code in amdocs-core-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...