1846 matches found
MAL-2025-41353 Malicious code in @mz-codes/consts (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50ebdb8b0358f1d1056c2797ace31bd5175c23de72d1880131e6dc931c0812c2 The OpenSSF Package Analysis project identified '@mz-codes/consts' @...
Malicious code in bps-react-design-system (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41400 Malicious code in portin (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41410 Malicious code in testnpm369420 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f95d0c4a710a2f6a2f8a29a9284d21da506dbbd15c745165497b7761275bccd2 The OpenSSF Package Analysis project identified 'testnpm369420' @...
Malicious code in @cf.cplace.platform/forms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be4ed03fbd3f41262f582eab6a80ae6e67fe611301ef8cf9558555a0add3af9 The OpenSSF Package Analysis project identified '@cf.cplace.platform/forms' @ 9.1.99 npm as malicious. It is considered malicious because: - The...
MAL-2025-41249 Malicious code in mv-hosp (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4952f8c63bd825b267e27af4ca78405659c40fa6b10ed3687573b348a92c690a Any computer that has this package installed or running should be considered...
MAL-2025-41395 Malicious code in mv-basico (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1167a9213ca4035480a81ad52b6d656dc41def144f7e449339d8b187c2e04745 Any computer that has this package installed or running should be considered...
MAL-2025-41412 Malicious code in tileuploader (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49889bb016c747fa54e8209157636844c077cd30f04900834d578905f47b61c1 Any computer that has this package installed or running should be considered...
MAL-2025-41417 Malicious code in udg-uc-sdk-pds (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in airbnb-react-server (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41391 Malicious code in kibiutils (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6973 Malicious code in flatfox-api-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in flatfox-api-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6947 Malicious code in personalizationtrkserv (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e171fa4d76ea31b32b21ec8efae81c75a65d7adcc42a621c06cfd5406110131 The OpenSSF Package Analysis project identified...
MAL-2025-6952 Malicious code in react-stickynod (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6916 Malicious code in burst-dash (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6915 Malicious code in bug-bounty-hunter (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in project-bounty (npm)
The package communicates with a domain associated with malicious activity...