Malicious code in r00tsid (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41371 Malicious code in bc-compare (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41404 Malicious code in react-event-tracker-dpdpoc (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @listr1/prompt-adapter-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c9103dcee0afbfa63c69bae22ac8f4e415daef3fcb2610b84d8278b1732f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a306188997a3decdf3eb0566e9ec1b3f81c5b1e0b4269eff69342744a9bad64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fb_helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd02d94679b40d95c81b651a29666a45452deabc83d8e33032104032eef13261 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tanstack-virtual-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b38d98c47aceac75b944aff9d0df30a563d89aaa076329820aa58b119e010448 The OpenSSF Package Analysis project identified 'tanstack-virtual-cor...

MAL-2025-41378 Malicious code in cwl_shared (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41263 Malicious code in sdp-transform-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f0bf5deb53b6f1424914462ad86d16738a1118a744d709e3e37abaf8907134 The OpenSSF Package Analysis project identified 'sdp-transform-parser...

MAL-2025-41355 Malicious code in @navify-platform/env (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in sdp-transform-writer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a7fe67cbf547a37aaa2286e629788d404dbcc306a63bd6edbd4101513e27138 The OpenSSF Package Analysis project identified 'sdp-transform-writer...

Malicious code in @stackgl/gl-conformance (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6402e01df0460d9b2d3778bed73dc61d60fc700196a3bb56a2e91768227f3391 The OpenSSF Package Analysis project identified...

Malicious code in @wp-feature-api/client-features (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in amp-metrics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dacbeb50af065a576ade73d084e6ac504cb061d33ebdb8fe8d72839b926e9d59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41254 Malicious code in orion-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d017f02da39bfb33285066e5d65476f32d57195efe73652d4659863fe7b0367c The OpenSSF Package Analysis project identified 'orion-ui' @ 9.2.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in @navify-platform/idle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4c05f7983c6a597941a36c8177f63342feee29acb5d3922471e2fa25da4f159 The OpenSSF Package Analysis project identified '@navify-platform/idle' @ 2.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-41353 Malicious code in @mz-codes/consts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50ebdb8b0358f1d1056c2797ace31bd5175c23de72d1880131e6dc931c0812c2 The OpenSSF Package Analysis project identified '@mz-codes/consts' @...

Malicious code in bps-react-design-system (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41400 Malicious code in portin (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41410 Malicious code in testnpm369420 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f95d0c4a710a2f6a2f8a29a9284d21da506dbbd15c745165497b7761275bccd2 The OpenSSF Package Analysis project identified 'testnpm369420' @...