1822 matches found
Malicious code in @cf.cplace.platform/forms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be4ed03fbd3f41262f582eab6a80ae6e67fe611301ef8cf9558555a0add3af9 The OpenSSF Package Analysis project identified '@cf.cplace.platform/forms' @ 9.1.99 npm as malicious. It is considered malicious because: - The...
MAL-2025-41249 Malicious code in mv-hosp (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4952f8c63bd825b267e27af4ca78405659c40fa6b10ed3687573b348a92c690a Any computer that has this package installed or running should be considered...
MAL-2025-41395 Malicious code in mv-basico (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1167a9213ca4035480a81ad52b6d656dc41def144f7e449339d8b187c2e04745 Any computer that has this package installed or running should be considered...
MAL-2025-41412 Malicious code in tileuploader (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49889bb016c747fa54e8209157636844c077cd30f04900834d578905f47b61c1 Any computer that has this package installed or running should be considered...
MAL-2025-41417 Malicious code in udg-uc-sdk-pds (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in airbnb-react-server (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41391 Malicious code in kibiutils (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in flatfox-api-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6973 Malicious code in flatfox-api-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6947 Malicious code in personalizationtrkserv (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e171fa4d76ea31b32b21ec8efae81c75a65d7adcc42a621c06cfd5406110131 The OpenSSF Package Analysis project identified...
MAL-2025-6952 Malicious code in react-stickynod (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6916 Malicious code in burst-dash (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6915 Malicious code in bug-bounty-hunter (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in project-bounty (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6968 Malicious code in vite-plugin-vue-extend-plugin (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in eslint-config-pcc-custom (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in web-bluetooth-spp-application (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bdbd2a9a0d851f1dae6e50f3c00e0b0839441f59b05d4e49f753afe278cd0ca9 The OpenSSF Package Analysis project identified 'web-bluetooth-spp-application' @ 2.0.1 npm as malicious. It is considered malicious because: -...
Malicious code in @yaqiguo/dnstest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3478ba78740bef836d1172c597de70dda1774f80ed7d9c3b8273dc9fbc9db71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...