1822 matches found
MAL-2025-47115 Malicious code in brfsddd (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-47112 Malicious code in @tr61/core-pkg (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in mcp-server-everything (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263d07d53076b8ca1efe56fcd69d4a4e3c6d6a496b6086a03b8bafb8ae58900c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-46986 Malicious code in mcp-server-everything (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 263d07d53076b8ca1efe56fcd69d4a4e3c6d6a496b6086a03b8bafb8ae58900c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bohr-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1951f7ba96d2d67ff96aa97e3fb6fe00615dbf39ba8b1b9fc822b33bdac69ba0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-44251 Malicious code in field_capture (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in jfrog-alfheim (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81aec3e5e257dac330f6d3f73c310c476b4926e6cd0040f2ac70b7a4f45005aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in my-javascript-project (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52eefb119e001e8686a1bde4aad7885b353649df1b9e39a1e27537c7ca14a980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in moodle-core-lockscroll (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4593d2f53dfa6444f6bc77ab415228cf1bb76f6ffc3e62b0973033f33bf3edd Any computer that has this package installed or running should be considered...
Malicious code in newrelic-infrastructure (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in library-website (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 152fbdb0c3259bb6ed24b96039f38d3db3bc716822511da408febc45fc2e93a6 Any computer that has this package installed or running should be considered...
MAL-2025-45310 Malicious code in ngi-core (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-44548 Malicious code in hb-otc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b382c578afb33978acde21c28497857451795f4dea0da2d567e5df9a437e646e Any computer that has this package installed or running should be considered...
MAL-2025-44029 Malicious code in document-metadata (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 310a04e0fbc7e2ba328f1b392655733ca387093a2e627dfdcc6beec46521cd3a Any computer that has this package installed or running should be considered...
Malicious code in react-native-wm-barcode (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d41cd8af4fc659204e641358eda189dac7d136a2918f8cec5c945431ced9a512 Any computer that has this package installed or running should be considered...
Malicious code in internal-helper-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in berachain-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44aebab0bbbd5111085070765f75cb2a7863bb8c97a276b96596f69a2062d10d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in test343tttt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14a83c7be6d241a79ccd6f23880afa83b749ac59232786eaab03a62b2512c9b7 The OpenSSF Package Analysis project identified 'test343tttt' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in accumulateinfo (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @callcenter-frontend/ui-components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7f41480a8be02c290f1d1b9915b4a57528a979a2736206adf8e3c701b44f846 The OpenSSF Package Analysis project identified...