MAL-2025-399 Malicious code in bookingcom-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68d25686015085f4d524b134542a14b1748266da0711ecc36ae2a59afe2abebf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bookingcom-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 797af29edb828b7011355ada91e0e1fab75d5725bf2213d65f47f4c1f407987a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinbase-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e9b3add04221c71d7c4f8d36b9c03ab651121a7e205d0e29793bd2441f46b8a The OpenSSF Package Analysis project identified 'coinbase-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in coinbase-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 710b36fc278e57d50e7ce86d489ae5e2da89f2ac58f80653232e0b2f7283e451 The OpenSSF Package Analysis project identified 'coinbase-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-391 Malicious code in apple-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b18eeeb5282535e8959e8e401a02971ab116425fce03d35ba50be1c2db0d6f1 The OpenSSF Package Analysis project identified 'apple-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8c3ed9194a70a080c9814645d91c46cf2195692168d2efa5e08e5078a853d91 The OpenSSF Package Analysis project identified 'amazon-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in airbnb-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5dbe417775cdf936de0b309b6f15596072d0e6111399a3f24d499f98f0fde022 The OpenSSF Package Analysis project identified 'airbnb-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

Malicious code in airbnb-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 569af68d5b2f70cc46c62d3be362723205c02819f13c60a456a6925c2f6d1dd2 The OpenSSF Package Analysis project identified 'airbnb-auth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in @moneyguide-devkit/style-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d41e363cb9b67e73c6cfe2f5b71641d9289a57d80051c4e3e67b22db36574d8 The OpenSSF Package Analysis project identified '@moneyguide-devkit/style-provider' @ 1.0.1 npm as malicious. It is considered malicious because...

Malicious code in zoomapps-texteditor-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b6be9c754c32184fac89d2d416b8d75cc15d7bb20219f8ace3c698d6e415fff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudinary-ct-run-sub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8b17191416c445db03bfceae872f6642a1171a2300b65df0c546dd5a1fc19bc The OpenSSF Package Analysis project identified 'cloudinary-ct-run-sub' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in yandex-pandora-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7c8829575ea2c09d2db8f6f98a73635e882f6ac8084b06174761270128f3438 The OpenSSF Package Analysis project identified 'yandex-pandora-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in bitmex-node-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cc7c20df046cd10e263fa37bcda6196d91e23537ce001e8ed4b9598700ad8b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vercel-repros (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61ab9d6c179c19b7bd4e20a4c65605457887724fa5f2bd4e0abfcdea66f7ff2f The OpenSSF Package Analysis project identified 'vercel-repros' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11883 Malicious code in microsoft.applicationinsights.windowsapps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52a55ac73cfe94f23310de107d74ba82bfa2e8ae17f9742af50ef4e2da42c98d The OpenSSF Package Analysis project identified 'microsoft.applicationinsights.windowsapps' @ 99.99.99 npm as malicious. It is considered...

Malicious code in rsd-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1ce32a78d33195ba4d402cad16a668c6dd0a2273f8e6a49b0ba2c65be6c88fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pipedream-curl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8b5e047b6a8fdba2b0c3473a51edbdb9b488f22377ca3a66bb206193e7da7e5 The OpenSSF Package Analysis project identified 'pipedream-curl' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in testing-example-amnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e3e68fcb0722dd3025334d128515302686aff3ebed84afc0747731353153fff The OpenSSF Package Analysis project identified 'testing-example-amnu' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-11791 Malicious code in raptor-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 585ea8fb4bbab2014a88a88807c9c5150eaf104c34a0d3158c0b7ed114aba2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11232 Malicious code in zkonmina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a74c40ef671e2fb9d5956f1fd7f022e0dd1ca0f1da3602a687e9172cc4280fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...