Malicious code in certifications (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d51c9defecdd382c5048eb6f92b32558355b8457b2b5cd63f3d86e12e8ed35b Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...

Malicious code in migrate-npm-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40e88d87096c208b4f54619b9977a873f533856db5cc436e42261a8e9254e162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2069 Malicious code in connector-colaborator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b36fb73f95f45f84f970f686c6e99ac696443d4011ed8949a09ba012e27336 The OpenSSF Package Analysis project identified 'connector-colaborator' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-1645 Malicious code in esm-appdynamics-grafana-react-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 18f395665c4d165d336c17cf90f183b9da91013f0d72574f6b2875830ed057d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1565 Malicious code in tablegen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3570d8e35e0d101811baef90ca7f5697fcb57be4cf3d82558480a54fb37d99d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1556 Malicious code in fluentui-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a946d5d0851f29bedadf8857d3b954ecf93da7aaa8b01cc198063141c739169d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in miniprogram-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 162ae3d0d0a1a6baf3618206ae9d0a31f403340e2a4bbf9aa7d4e9980eb1d817 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1516 Malicious code in amagi-kanban (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d71615497a724cea51b581b078681fd29f136e4d9338af74fea3692dd35754a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1513 Malicious code in champion-trader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a12ee286d5987c604b6598557a7a9d8ed03564366dccc6227f87d58a9ac5c171 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in evoplay-spinential (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 715a8e278031d52f48cc59f78dfd93253ecc47b831d67be2854158f1e977f77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cth-poc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-1228 Malicious code in precompiled-iris300 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2fc49c5f492a6603e16701144ee66fabcdea41176b445eb496c8e9d11caccd4 Any computer that has this package installed or running should be considered...

MAL-2025-1013 Malicious code in apple-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...

Malicious code in testingthesand (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in tittottit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in prajwal_kewat-test-package (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-705 Malicious code in css-blocks-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd8788a6de395289af00ce5d63b51a4609d89ea09f2bf3eb36af0e27234e0fb1 Any computer that has this package installed or running should be considered...

MAL-2025-713 Malicious code in overture2osmjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4757db7655e3de9ca7fa7343ca0d8cd59c899c46454ca659ff07261b884f64db Any computer that has this package installed or running should be considered...

MAL-2025-733 Malicious code in finfonfon (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in launchpad-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...