Malicious code in o2-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3630b06db650613bea91129fed49f12bae373b86c45a215fce251a86d9d391d0 The package o2-tooltip was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-vermeer-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f2b16fc6904b39ed8ae073822dc4a01bf2613ba243b3c2787740dd3cf2fc4 The package airbnb-vermeer-node was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a37ecd19e914e8801e6398f69fea68500fc8c985d6bff3dc5613aaf0ea09692 The package airbnb-phoenix was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/udt-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e7622a4fb5f78043c8f52ad78fb036d26fa8ae041f8d2d21f82d4620894e14 The package @ra-ide/udt-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190593 Malicious code in @ra-ide/logix-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190595 Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190587 Malicious code in alicenpmpocpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158edf3777a6df259583332b3694508454333d6643c7eb04eea85176ba9df724 The package alicenpmpocpackage was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in identity-authn-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db734e79e178dd70b53bb814581620da1604a06da4967555160d7dfd0d14e0c5 The package identity-authn-core-ui was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190584 Malicious code in @kiwiiw/ez-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5c041881bf0c4fa9609a55549447c4edf120f50bd70b30b8f71a9d9814f371 The package @kiwiiw/ez-lib was found to contain malicious code. Source: ghsa-malware 93b9fad273c843b3194e657cf9d54441b5beecba505b2c72db555efe226ca2a6...

MAL-2025-190579 Malicious code in hellospa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...

Malicious code in node-calculator-b0e4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e25d2464b2da9bfb7e629441757f1d413f8e1cf4a38522f2316ef84755e59 The package node-calculator-b0e4 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190569 Malicious code in node-calculator-b0e4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e25d2464b2da9bfb7e629441757f1d413f8e1cf4a38522f2316ef84755e59 The package node-calculator-b0e4 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-8ddb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cecdcd0f2d763dafb0dadb9723d844fe53a10c842578f1ffb0c768d86f9da5 The package node-calculator-8ddb was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in node-calculator-fc9a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fce72f3b9dbb5fb52c5ed5de8bb398997497c2d706ce237f5062960eb66341fc The package node-calculator-fc9a was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in com.mixpanel.unity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a617ed7539b6703818676ef051a6c12331b0e014026d1b56fb7d72775d7ad5a1 The package com.mixpanel.unity was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49389 Malicious code in globby-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5dabda4e0dee5eaa0167110e61399509aae53fc96c8c39ebd8b1535e5f4ca15 The package globby-legacy was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49365 Malicious code in dunnhumby-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b047f32f0323beace719a36eec364b2d804d556202950dae7942b04e2f2b09a The package dunnhumby-component-library was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49350 Malicious code in replit_ruspty (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 703ba59c0f40f937ba922d389d8beab406cc57110b792ed8d58ab7e8133c1712 The OpenSSF Package Analysis project identified 'replitruspty' @ 1.0.0 crates.io as malicious. It is considered malicious because: - The package...

Malicious code in pkg-with-optional (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7273cf1aeda44bb1d1c2b9e1336bae21d1e1c6606ec940757a218d7761a81b The package pkg-with-optional was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in python-requirements-inspector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8f26b5cd7ab7cb6a847edc1afec2dc496ac0f0bd3f592f2a98391365298c4fc6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...