MAL-2025-48510 Malicious code in src_module_index_ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bf9366083306734c374979ba195511ae8d793d9e0cb915f2f7374ee7450724c Any computer that has this package installed or running should be considered...

MAL-2025-48461 Malicious code in @shopify.com/shopifyql-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a2bd69260e57b66e60b0e7aa07aab1d645f5cb9c42f30ce261b119e51f92ffb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48433 Malicious code in corp-ais-client-my-channel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5c6a2e2c6632d11abe65b902c4dee848386ec4240aba0fee8f76983ac4ff56 The OpenSSF Package Analysis project identified 'corp-ais-client-my-channel-lib' @ 99.9.10 npm as malicious. It is considered malicious because:...

MAL-2025-48413 Malicious code in aps-configurator-inventor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fc3df70de166c4b79ec8915577d7b560a414f73999a8d88efa7c0bfa59b1733 The OpenSSF Package Analysis project identified 'aps-configurator-inventor' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-48502 Malicious code in package-g (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ab-test-wordpress (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48316 Malicious code in analytics-data-collection-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c5655e480e57af4b115f0660b3e96f7412f5d95816cd49858611d28761ea501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48401 Malicious code in supplychain-firewall-benchmark-hello (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19af5203b034f6420f173bf6e45719afeb28ecfe359a8858cbe814fe3cd55d11 The OpenSSF Package Analysis project identified 'supplychain-firewall-benchmark-hello' @ 1.10.2 npm as malicious. It is considered malicious...

Malicious code in v0-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c3fed66eb2cf11c949abeefd6369b31cf4fb7eb2cace6da6e8df56e135fec66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48369 Malicious code in java-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 555d7c368b052227256d6f6b35ce4b6d84da939df3127667ff6e73515dbee1bd Any computer that has this package installed or running should be considered...

MAL-2025-48389 Malicious code in niletestpkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in niletestpkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in nileninjapkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48384 Malicious code in nilepkg4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in checkout-ui-extensions-react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48363 Malicious code in filen-apps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

EUVD-2025-24884

Malicious code in bioql PyPI...

MAL-2025-47849 Malicious code in gna_university (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99833d7171de2f0404506d22b9ba4962fe6ee2fc193c8e7c6e8da0530bae6c0 Any computer that has this package installed or running should be considered...

Malicious code in gna_university (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99833d7171de2f0404506d22b9ba4962fe6ee2fc193c8e7c6e8da0530bae6c0 Any computer that has this package installed or running should be considered...

Malicious code in propeller-solver-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a79fc2ce4f8dbef3a36ad1dcf36011f9d86435f347aa81ed601295d75e818b04 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...