1822 matches found
Malicious code in seznam-diskuze (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6852 Malicious code in sendbird-groupchannel (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in mapbox-gl-js-toys (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in posa-loginpage-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 84c3125fd931daa33ae630ab312e984e99008ff68f7f1e118b3f54142026f4a5 The OpenSSF Package Analysis project identified 'posa-loginpage-plugin' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in sendbird-visual-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c99c539ebeed9289f0f603fbfe2d80bc9fe35f624bbd036ad397617db3be8de2 The OpenSSF Package Analysis project identified 'sendbird-visual-test' @ 11001.0.1 npm as malicious. It is considered malicious because: - The...
Malicious code in google-webfonts-helper (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba7d8c4c4151033fdccecb7ed439075f6c8eb39490462dd7b25aac68d2a22482 The OpenSSF Package Analysis project identified...
Malicious code in adminarmorproject (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in nova-state (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6850 Malicious code in nova-state (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6838 Malicious code in gik2 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in lynx-libs-mono (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7dcde725ba12b559bfd1e62b8d6058ced4b0a5ed11b9f168f8f6f576b42ef801 The OpenSSF Package Analysis project identified 'lynx-libs-mono' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...
Malicious code in thisisthedaventest (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in node-calculator-yqhi (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6712 Malicious code in cycalculator-ye51 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in undeface-test-5 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in zano_ui (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amdocs-auth-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16664451db45f3a8b8da108a2b38785d0a7471480df169c57b38bccde640f7 Package name mimics an Amdocs internal package dependency-confusion lure...
MAL-2025-6675 Malicious code in undeface (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa6e61be1ff207a63e7d860121269781909d89daf344c1af7875918ac2d0fa22 The OpenSSF Package Analysis project identified 'undeface' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in internal-random (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amdocs-core-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...