497 matches found
MAL-2025-6032 Malicious code in @md_nafeed/synpress-metamask (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6077 Malicious code in chime-config (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5056e6243008cfb8f92e26f71e00d4f08abfb910bdabbbf516dde94a28421ac Any computer that has this package installed or running should be considered...
MAL-2025-6087 Malicious code in dewiz-xyz (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e73eec59fc359ccdddf7aea6963be27ed045429eae410109c1d749dae6761e51 Any computer that has this package installed or running should be considered...
MAL-2025-6091 Malicious code in google-login-flow (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @nytt/sass-utils (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6061 Malicious code in @toptal/picasso-select (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6047 Malicious code in @toptal/picasso-form (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6066 Malicious code in @toptal/picasso-typography (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-grid (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-dropzone (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-calendar (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6035 Malicious code in @toptal/davinci-cloudflare-requests-handler (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-lab (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6136 Malicious code in wc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0074aa23419396ed1a9fe8acbdb9bac05d585129e3723d4db8a9af9f457096c6 Any computer that has this package installed or running should be considered...
MAL-2025-6095 Malicious code in hg-icons-2 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in marcom-ac-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64d378ac078f27f1f0357746b50307c933999c2eb82b5c9c7a7a6b0645910749 The OpenSSF Package Analysis project identified 'marcom-ac-console' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5994 Malicious code in acsascasccsaascascacs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4d29e3ba25b084215e80ac7601a998e66cf11ad88607db37e23fa50817b135 The OpenSSF Package Analysis project identified 'acsascasccsaascascacs' @ 1.0.2 npm as malicious. It is considered malicious because: - The...
MAL-2025-6134 Malicious code in vercel-edge (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 705d265f51a6811b9f95fdbe239738b37767248d5e0b8b66cf689b122f4a96c9 The OpenSSF Package Analysis project identified 'vercel-edge' @ 99.5....
Malicious code in preview-server-auth-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 923e18277dc972e221ab7a161e65c18219ff037b3a347b86f86df7f6cba1bcfb The OpenSSF Package Analysis project identified...