Malicious code in eslint-config-ivy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e1af1d02505f4566c424f21a111d21aab14a0af46e04316c0c84bd47c35a777 The OpenSSF Package Analysis project identified 'eslint-config-ivy' @ 99.99.992 npm as malicious. It is considered malicious because: - The...

Malicious code in vtk-osmesa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 910e787804512eabe1c118f5347fed9f57ca936717e18a80d26622108d75399e During the installation, sensitive information are exfiltrated incl. env variables --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in ngf-gov-hr-navbar (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85f2baa5c5673490af93199349e0ef54f7c581115b1fa83d6df2c9e18430e031 The OpenSSF Package Analysis project identified 'ngf-gov-hr-navbar' @...

Malicious code in mgzfakee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90b2e8527746aae303a816c6d654f3c6b1d2898ac267657a6fb553577cb0fd0e The OpenSSF Package Analysis project identified 'mgzfakee' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in prospects (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3937cc0353b0952f14ff2d9e68216f857e4ffc01f688f600948c6d1b234915a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lscommons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f574fcf984262d226cc642d115840f6dc7f8125d0e7eb498928e341cf50cd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in model-providers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bc812776fc9ca2678deabf678d9dae58067e353d0d7131e35d68fa452ff57f5 The OpenSSF Package Analysis project identified 'model-providers' @...

MAL-2025-6126 Malicious code in so-demo (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @3kali182/selenium-webdriver4 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bff78cc4315b550d5909b8c816e780ca2f8d9a2faf17fcf35ec85eecdec84644 Any computer that has this package installed or running should be considered...

MAL-2025-6104 Malicious code in matka (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6027 Malicious code in @blocks-shared/desktop-title (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6093 Malicious code in groq-link2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41bce2830a85a25120da79481083dd6be69ce23b29f67ed7678a9009bbdb71f7 The OpenSSF Package Analysis project identified 'groq-link2' @ 1.0.23...

Malicious code in @lensapp/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61bc10b6edfec3225d467f169ee0c13a8d66637e96186f959196d0ae15822ad6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in os-apps-ui-traffic-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cdf3d7006b0b2cb524eb3e2fb401636a3a58bd02e1f9296ba89d576397b8831f The OpenSSF Package Analysis project identified...

Malicious code in tutorial_front (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8c37adc01a1128e0458364194c6aae8faaeb4f5ce55cfe0aee587ea5d5fc751 Any computer that has this package installed or running should be considered...

Malicious code in formatjs-internal-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93108c8da3931417e2009ddb17d45ffd86062e129a805a7ff62f3361780fd2d6 The OpenSSF Package Analysis project identified 'formatjs-internal-intl' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-5743 Malicious code in actions-experiment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3571367d4274d4ca5d5c2cd7b400c40b4d656c2c58fb0746e8372cb24910c5b The OpenSSF Package Analysis project identified 'actions-experiment' ...

MAL-2025-5818 Malicious code in playwright-e2e-testing (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1947219a5f6bf4374f28676075008bd3dc532f9ffde90b285e73fcd418a198c4 Any computer that has this package installed or running should be considered...

MAL-2025-5801 Malicious code in @rupahealth/design (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0616aa94e7e7f933fb1f912840b3ec202980dde2d75d689d36e2d3cee1a22cec Any computer that has this package installed or running should be considered...

Malicious code in mttdocs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware beaa5b8141bfc9ba6d1eaaa989a534c5cfc5c7b84c82e6c3ed0c38d5112efbe4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...