1846 matches found
Malicious code in anchor5 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8d44079a1abc61c092193be41f21fe5d45b1f7231f539e42efbef50278baa80 The OpenSSF Package Analysis project identified 'anchor5' @ 1.2.0 npm...
Malicious code in spring-context (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6100 Malicious code in jcl-over-slf4j (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6765b8e788daac3b9fcad973360085b07eb23632ecc6e6a30030682e006ff607 Any computer that has this package installed or running should be considered...
Malicious code in telenet (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in chime-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c47d81929483a169d2ee7d4f0f5c08d14518a52a1efa368fc87e2101bd75de5 Any computer that has this package installed or running should be considered...
Malicious code in login-oauth (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in ochot (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6063 Malicious code in @toptal/picasso-slider (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6056 Malicious code in @toptal/picasso-popper (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-logo (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in everestsystems-content-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1e36c55069fe1374c19441b5e3cbabd0ba1bc120d2d1651dd5570157a8a9c57 The OpenSSF Package Analysis project identified...
Malicious code in @jssrv/template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce87403bb05aae59ca8877b014a3a8255b54b2a22e930687649c675cc9602f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6209 Malicious code in marcom-ac-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64d378ac078f27f1f0357746b50307c933999c2eb82b5c9c7a7a6b0645910749 The OpenSSF Package Analysis project identified 'marcom-ac-console' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...
Malicious code in dascxcxcxcxcxcxxc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b679a7ed981cd77671778267b213920e462f2f9e5ae49ba61967779efb331aa The OpenSSF Package Analysis project identified 'dascxcxcxcxcxcxxc' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in @company-internal/logger (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d0932de39c3f8c9bcb34c9f241df2d154d4659532cfddb67ddd06e283c38c14 Any computer that has this package installed or running should be considered...
Malicious code in vercel-edge (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 705d265f51a6811b9f95fdbe239738b37767248d5e0b8b66cf689b122f4a96c9 The OpenSSF Package Analysis project identified 'vercel-edge' @ 99.5....
Malicious code in node-ts-esm-auto (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-5983 Malicious code in npmdeco (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c7110ed52ce1bc50ece55d4ed6f010f23d0ec5383c3b482208028e97eeab9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5982 Malicious code in datadog-instrumentations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbf74efed2b32abd010705d5410e78270b572065e8fc02c3a1961b4afc2585ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...