1846 matches found
Malicious code in amdocs-auth-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16664451db45f3a8b8da108a2b38785d0a7471480df169c57b38bccde640f7 Package name mimics an Amdocs internal package dependency-confusion lure...
MAL-2025-6675 Malicious code in undeface (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa6e61be1ff207a63e7d860121269781909d89daf344c1af7875918ac2d0fa22 The OpenSSF Package Analysis project identified 'undeface' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in internal-random (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amdocs-core-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...
Malicious code in playwright-config-pdffiller (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6671 Malicious code in @usaa-grp-payments-web-experience/bk-acknowledge-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b56c4b39f3ee1932940e85cef9f0071fc46b948628c13f5588bd484de40ab42d The OpenSSF Package Analysis project identified '@usaa-grp-payments-web-experience/bk-acknowledge-module' @ 2.9.11 npm as malicious. It is...
Malicious code in eslint-config-pdffiller-typescript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd433611287b0e5010c855eaeac600cc58e87febefac7a8fdcb27568a25d29f2 The OpenSSF Package Analysis project identified 'eslint-config-pdffiller-typescript' @ 999.0.0 npm as malicious. It is considered malicious...
Malicious code in azuresdkpackagelist (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in nubank-www-latam-commons (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ef98f115341b4b410449098489bee4471969a706dfe619a9d7704d26fa5a1f The OpenSSF Package Analysis project identified...
Malicious code in subchart (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in sentry-core (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in weavejs-backend (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in tms-spike (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in mpesa-ui-components (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in docusaurus-theme (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in reference-library (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in build-angular (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in internal-pkg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6336 Malicious code in testing123kk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 bebd39f4de86af5e9634fbfda5f8c97794b597b1066c2fcd32e3a2068569280d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...