489 matches found
Malicious code in @toptal/picasso-grid (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-dropzone (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-calendar (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6035 Malicious code in @toptal/davinci-cloudflare-requests-handler (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-lab (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6136 Malicious code in wc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0074aa23419396ed1a9fe8acbdb9bac05d585129e3723d4db8a9af9f457096c6 Any computer that has this package installed or running should be considered...
MAL-2025-6095 Malicious code in hg-icons-2 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in marcom-ac-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64d378ac078f27f1f0357746b50307c933999c2eb82b5c9c7a7a6b0645910749 The OpenSSF Package Analysis project identified 'marcom-ac-console' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5994 Malicious code in acsascasccsaascascacs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4d29e3ba25b084215e80ac7601a998e66cf11ad88607db37e23fa50817b135 The OpenSSF Package Analysis project identified 'acsascasccsaascascacs' @ 1.0.2 npm as malicious. It is considered malicious because: - The...
MAL-2025-6134 Malicious code in vercel-edge (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 705d265f51a6811b9f95fdbe239738b37767248d5e0b8b66cf689b122f4a96c9 The OpenSSF Package Analysis project identified 'vercel-edge' @ 99.5....
Malicious code in preview-server-auth-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 923e18277dc972e221ab7a161e65c18219ff037b3a347b86f86df7f6cba1bcfb The OpenSSF Package Analysis project identified...
Malicious code in @ivy-shared-components/iconslibrary (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6212 Malicious code in prospects (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3937cc0353b0952f14ff2d9e68216f857e4ffc01f688f600948c6d1b234915a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6123 Malicious code in realtime-next (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in test-package-avinav (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db665678ac908b6f9aa76ef069759ebd70b62c901a6f840b765ba7cac299c423 During installation, a heavily obfuscated code is executed. Exact behaviour unclear --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
Malicious code in matka (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6117 Malicious code in preview-server-auth-bounty (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5816 Malicious code in os-apps-ui-placement-manager (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @blocks-shared/atom-panel (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c591a20fbe6de7639db5ac559fbc7db95960967fb3eb809e6fe2f58943f4a75 The OpenSSF Package Analysis project identified...
MAL-2025-5809 Malicious code in dep-confusion-poc-monke (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5eadc84c6eaa4f7eb92319cac88bbe0057e1eb86646846287104d5d7d8f9c0 Any computer that has this package installed or running should be considered...