MAL-2025-5291 Malicious code in defectdojosw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93d614c0d808786b112774fdec4eb2b8afecef6ec8de82e4945bdc644e5023c4 The OpenSSF Package Analysis project identified 'defectdojosw' @ 10.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-5368 Malicious code in blade_background (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e0ab7bc65f47415c49500ce45a5167fd26a9eb02322a1b7d4d7d61c632c960 Any computer that has this package installed or running should be considered...

Malicious code in myuscis-material (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cba011b86ceb83ee613aceb9c55a91e8aabbb2df8d473962bff0b0c55879ce49 The OpenSSF Package Analysis project identified 'myuscis-material' @...

Malicious code in ce24 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in pnp-resume (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in irradiance (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26991c136a318903b5628c9d72dc626e92359c6e2e22efbd6c656c400974f9d Any computer that has this package installed or running should be considered...

MAL-2025-5428 Malicious code in kwp-a-b-testing (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5242 Malicious code in braintree-dropin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975d9545344189dda20be0c6790c2deebbd8fbf1d3b992641dea6f1044521436 Any computer that has this package installed or running should be considered...

Malicious code in forms-extensions (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in agoda.cronos.gql (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0918c4b7cc7549b33d32ef492ce8439108e4df06cece719c5a0e497e048f6293 Any computer that has this package installed or running should be considered...

Malicious code in strict-csp-builder (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e42c1e63ff88dae30df638aa554602cf21df6606f31d9476c8b00d28881777d5 Any computer that has this package installed or running should be considered...

Malicious code in handelsblatt-hypesignals-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1041cb10e755d31aaf87160a55cd21a723840476f966117b7895256ef06ae13e Any computer that has this package installed or running should be considered...

MAL-2025-5392 Malicious code in docs-root (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in hackshack-leaderboard (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5440 Malicious code in my-not-confused-packages (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a538815a196fdd5ba0751d871564ddee1dd8a5b285a933e28862c28faa25eb Any computer that has this package installed or running should be considered...

Malicious code in totallynotapaylaod (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in rival-fetch-hook (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in monpayload (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5348 Malicious code in @exitman_ctf/steal (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in alexwilliam (npm)

The package communicates with a domain associated with malicious activity...