1822 matches found
Malicious code in redux-probe-unknown-action-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d273d8be87dc1aaa71222024d9f545d4ec9bde08234f27b0c9c81f6dd8c86721 The OpenSSF Package Analysis project identified...
Malicious code in dva-update-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b95ece97aa3f5d58ea4fb2cedc0508d316d19bf5241465748806202bcd86c861 The OpenSSF Package Analysis project identified 'dva-update-rce' @...
Malicious code in dva-loading-show-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2779c32d64a46ff3b8b9de62cd9161c7b6e0071c4a3103b2a37e949f374467a0 The OpenSSF Package Analysis project identified 'dva-loading-show-rce...
MAL-2025-6256 Malicious code in redux-replace-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb28c0e340d0d3220c0b6c87681ecdb8ff015040d97ed20852a5fabf651f503d The OpenSSF Package Analysis project identified 'redux-replace-rce' @...
Malicious code in @googlesitekit/assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7823f5a513a40959c5bd9912593b27c89fb7f0d627ed9a66417d0f0707472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in bufbuild-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea2a6d8f75509bff2876bce466f00b9c7c810394f46e6479c6e2d8b19acc9557 The OpenSSF Package Analysis project identified 'bufbuild-core' @ 1.0...
Malicious code in dctk (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in runtime-dom (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in hackerone-internal (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8ddab95d549d0170f1470cafc839ea1bc22e62f6f41cb1c269d107682378db1 The OpenSSF Package Analysis project identified 'hackerone-internal' ...
Malicious code in app-wheelify (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in player-component (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in terraform-cloud-action (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in askama (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6276 Malicious code in askama (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in marcom-ac-analytics (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6116 Malicious code in pre-and-postinstall-scripts-example (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4994e0104f427d4e6ac062c0ec26e609127db5c43b703a286194e39d36ae9e9 Any computer that has this package installed or running should be considered...
Malicious code in anchor5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8d44079a1abc61c092193be41f21fe5d45b1f7231f539e42efbef50278baa80 The OpenSSF Package Analysis project identified 'anchor5' @ 1.2.0 npm...
Malicious code in spring-context (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6100 Malicious code in jcl-over-slf4j (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6765b8e788daac3b9fcad973360085b07eb23632ecc6e6a30030682e006ff607 Any computer that has this package installed or running should be considered...