MAL-2025-6212 Malicious code in prospects (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3937cc0353b0952f14ff2d9e68216f857e4ffc01f688f600948c6d1b234915a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6123 Malicious code in realtime-next (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in test-package-avinav (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db665678ac908b6f9aa76ef069759ebd70b62c901a6f840b765ba7cac299c423 During installation, a heavily obfuscated code is executed. Exact behaviour unclear --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in matka (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6117 Malicious code in preview-server-auth-bounty (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5816 Malicious code in os-apps-ui-placement-manager (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @blocks-shared/atom-panel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c591a20fbe6de7639db5ac559fbc7db95960967fb3eb809e6fe2f58943f4a75 The OpenSSF Package Analysis project identified...

MAL-2025-5809 Malicious code in dep-confusion-poc-monke (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd5eadc84c6eaa4f7eb92319cac88bbe0057e1eb86646846287104d5d7d8f9c0 Any computer that has this package installed or running should be considered...

Malicious code in rambler-id (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d88b84167baafecc35066da4403daf40828ae3e5e178b06cb0d27c85670839c The OpenSSF Package Analysis project identified 'rambler-id' @ 91.9.9...

MAL-2025-5657 Malicious code in rambler-id (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d88b84167baafecc35066da4403daf40828ae3e5e178b06cb0d27c85670839c The OpenSSF Package Analysis project identified 'rambler-id' @ 91.9.9...

Malicious code in @laredoute/design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e56fdae15fb0b525a4212e71ff9dd4ec7cd0e3f4076552ec379c49c8f4a4e899 The OpenSSF Package Analysis project identified '@laredoute/design-tokens' @ 0.1.55 npm as malicious. It is considered malicious because: - The...

MAL-2025-5646 Malicious code in corplogger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9bcb9f25864b2367cfc6d8ca1e691663a9f768c407c747273e385a74ce2d4fa Any computer that has this package installed or running should be considered...

MAL-2025-5643 Malicious code in eth-multisig-v4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0011f8c820d2bf5736f029e749e3b1eb172ec056d5d712b620b95ef9ba5aa4dd Any computer that has this package installed or running should be considered...

Malicious code in canonical-bridge-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38c4c4332b7b6efd48d2c9360444d99754e398a49f7099e1d7a5cef7fb22358 Any computer that has this package installed or running should be considered...

MAL-2025-5628 Malicious code in consgraphqlnodeserv (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1884eb1cec539175697a599d5efe57c8627b48df2ec8f1e92eff097a796510da Any computer that has this package installed or running should be considered...

MAL-2025-5627 Malicious code in graphql-commons (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4721ab2836126a35a1237cb7af09335a89464c67af8004442176ec9c009b24b4 Any computer that has this package installed or running should be considered...

MAL-2025-5625 Malicious code in plugin-meta-extractor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afae718387e4b2dfc69c8abec1fa53bf680355cc9e412cbeedfa77c47ac2f6b Any computer that has this package installed or running should be considered...

MAL-2025-5623 Malicious code in atlascode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8253ba20040dbe36a55d6e0d506f11c3fdb26fc8991cae009b2da2531d971433 Any computer that has this package installed or running should be considered...

MAL-2025-5826 Malicious code in super-alpha-api (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5721 Malicious code in protobufjs-websocket-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a5372e68ba0b48947bc24234bd3009eaf3350edf61ca65bd42229c19a046fe8 Any computer that has this package installed or running should be considered...