Malicious code in baseline-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8f0d63405c3006d5549ebf1df01f884df985fdbac7dfcc07c22c06ad556c8e The package baseline-server was found to contain malicious code. Source: ghsa-malware 2eef37dadfa82b7f47a185f272073322cc60a193be57b46387b84bbc55b3655...

Malicious code in example-icrc35-shared-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e7e6839f13b54dc75f2b851ec1c1e78a9bbf4591f438a2053c99658e5f60189 The package example-icrc35-shared-library was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-49246 Malicious code in json-schema-to-typescript-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148a68690ce752d3b4d67269d4cdd05066913f5abbc344c7f7bf9ac550af794b The package json-schema-to-typescript-example was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-48735 Malicious code in legacy_esg_odf_common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c56f634d22583d4f5aa8a52eeab8e3d5c0659c0cbfd1a5a9b0a4741b02ca251d Any computer that has this package installed or running should be considered...

Malicious code in jquery-ui-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6feb40c9d7a44c987c085d658198139fcdd2fdf8b0000dab67f486d3271a036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48687 Malicious code in graphclient (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8522d59c3381b60fc748b14103e812659b6be95032a14775c42e4a14ac4b675f Any computer that has this package installed or running should be considered...

MAL-2025-48613 Malicious code in ark-experience (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3390fa937ce615a9cf2e911edd90f9f2e03376c02c4a2f1642d3c9a9fdd4f291 Any computer that has this package installed or running should be considered...

MAL-2025-48611 Malicious code in @aml-ark/demo-house (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e366f776aeaca182573ad2bf8f73e1d66803e0a13d1f4dc7f074f078b3cef347 Any computer that has this package installed or running should be considered...

Malicious code in @aml-ark/ark-experience-byteplus (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b9a81d78ce8d8f1da9a31e80166834c3098ef03d5ef0e58e1a03d1d93418314 Any computer that has this package installed or running should be considered...

MAL-2025-48617 Malicious code in cloud-data (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 424f85d34d816976e9e4e9674c41801256f7db680cdc2c3ce4c5363bd81c876a Any computer that has this package installed or running should be considered...

Malicious code in faustjs-org-sitemm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd5170a7cd8c6057c679a57454447d33c3c699d911bb06b70386d4d67244ef1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-links-autocomplete-id (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in purchases-roku (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c429e2a2e9aa0a6cda588f67e61e21c1830f469ed3a4b29f17845326869ba2be Any computer that has this package installed or running should be considered...

MAL-2025-48558 Malicious code in demo-mercadopago-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a777ccccffbf142e34b0081be4681c4ffcb72aa584b99d15bfd58878e6085881 The OpenSSF Package Analysis project identified 'demo-mercadopago-mcp-server' @ 99.0.3 npm as malicious. It is considered malicious because: - T...

MAL-2025-48555 Malicious code in user_oidc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e28e6e5435f54199a3dca6186e1ad2d2846226bcf0a6792ff09d40b6215ed7af The OpenSSF Package Analysis project identified 'useroidc' @ 8.0.2 np...

MAL-2025-48753 Malicious code in puppeteer-jest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b344f7f7f48bc61a2216808c72e518be94a33da9dac41acba0de196d228384 Any computer that has this package installed or running should be considered...

MAL-2025-48621 Malicious code in cypress-typescript (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b097d06051e8ef675fa3ea9aa9b85954881d62d81b5e6e4301716fffd4807c9 Any computer that has this package installed or running should be considered...

MAL-2025-48744 Malicious code in node-js-playwright-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1641207c93032c94f176032bea4a9fc81eecc63bf9340ebc483585378afdb939 Any computer that has this package installed or running should be considered...

Malicious code in node-js-playwright-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1641207c93032c94f176032bea4a9fc81eecc63bf9340ebc483585378afdb939 Any computer that has this package installed or running should be considered...

Malicious code in test-all2 (npm)

The package communicates with a domain associated with malicious activity...