MAL-2025-48089 Malicious code in v0-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e83b15c1e9db5fa8cf65392f9f91ac878f30e714c3ecba2b4875a99512281 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48364 Malicious code in flight-debug (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f68e2b41ce41ec300d19a5bfea6143aa90273b03ad4b7016083389bfd14919fe Any computer that has this package installed or running should be considered...

MAL-2025-48368 Malicious code in ios-signing-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bfb96a60459a153a9a22586c87b5bf6e35ecf604760a4de43b056c3de5127f6 Any computer that has this package installed or running should be considered...

MAL-2025-48391 Malicious code in ninjaleetpkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f13aabdecef49b2b16b690cd28f6bb706a9c8c2902fa9252bf17a1d8774f23 Any computer that has this package installed or running should be considered...

Malicious code in nileninjapocpkg2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in nileninjapocpkg1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in nilepkg5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48385 Malicious code in nilepkg5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48375 Malicious code in nileninjapkg6 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48370 Malicious code in nileninjapkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in react-dnd-html5-backend-14 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af5cd4573cfbc13b9582d1e56e4560f4e7582760f20173d068752a8d25b97c91 Any computer that has this package installed or running should be considered...

Malicious code in react-rails-builds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ca9cbf4678da8852200af1f665bf8afcc0debbef676c368fb9d4b762f058be1 The OpenSSF Package Analysis project identified 'react-rails-builds' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-48399 Malicious code in xssnn20251 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in xssnn20251 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48365 Malicious code in heyheyhey (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48398 Malicious code in ven0m90test1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in filen-apps (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in fc-system-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 192ca56fc1f77c6e39d9fdded9dbee0f4973f1fc49ee37e5f773d9f60d70858c The OpenSSF Package Analysis project identified 'fc-system-testing' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-47864 Malicious code in v-pure-tooltip (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11bde7847b3225c4c27a2008a9044848c459c69ebe532cf7fd4d0939d4f91f86 Any computer that has this package installed or running should be considered...

MAL-2025-47862 Malicious code in stylelint-config-twbs-applestrap (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4321ac47009a37e5956e0e2eeb2b098a8c56df9d9e9ed0b71c26f78ecff884 Any computer that has this package installed or running should be considered...