Malicious code in test_for-pentest_test_dependcie (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in react-native-google-acm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3987a453bfe3f7164232221b3a1a0f9c3c182a6581cf7a9241f4fbb7e77af649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @chatbot-builder/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ace9cff4af8d9323da0b8644083e75867baace24814284462f536c574065052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openkitjs-simple-sample (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b86b90f2ffa63945be2355f5639543a032f0a57ea59dabe377573e35e9d6507b The OpenSSF Package Analysis project identified...

MAL-2025-4536 Malicious code in xsolla-pay2play-widget (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48525bae2b7d23a83f3e96e77031380673cc831294a477623f29b8b82b9a8fa9 Any computer that has this package installed or running should be considered...

MAL-2025-4553 Malicious code in csp-bypass-poc (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in halodoc (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in arc-offsec-custom-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acb3bbd394d6b00a6c9c608c0692c0c3748162b099b5eab871667f3bca061a2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mirror-logger-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92a6abc2d944966bb6b2706869d9fd329de99a9fbf60b2f594ba60b61dd3cf30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cspotcode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2130be6b5e619ba165a6aece5d32fbf21121d999dea65d83d80d4464db4b1ce Any computer that has this package installed or running should be considered...

MAL-2025-4423 Malicious code in tml-sso (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 847dbce1211be416799a06c22cc32901e282fd07fbb9d9b118b8763d7aa24b09 The OpenSSF Package Analysis project identified 'tml-sso' @ 10000.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in hpglobaldata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 459cca0394666da81c2e6b2f659b91902693b72fd5e18fc6ca3e08347197e941 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dbtw/mfe-gateway (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fafde4d408da1ab81fb068824fa886f677ddb1b507e9f1040b740152f58adb3 Any computer that has this package installed or running should be considered...

MAL-2025-4578 Malicious code in shaktihacker (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe742c824848f300f6e3b49b60c5ccd47bb3c258769cc8444d8e87ca6a3404af Any computer that has this package installed or running should be considered...

Malicious code in pootle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02e85bef7e8a01d18636b40c7543cadd257472b0b984989ba4ca747f6c4c6f5a The OpenSSF Package Analysis project identified 'pootle' @ 9.9.10 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in logging-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708023935bd22528887255d2b3ceda250e2b246d9ffeae382c90868b1b7bc80f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3963 Malicious code in dojo_10 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8917f5f3c438feb5b1106f4aa4293fabc6fa81bff53105084df9e6113f0c6c0f Any computer that has this package installed or running should be considered...

Malicious code in sforce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1006bbc6c749967a658f4450e8557dbe5aec05fcc5d4ef9a9d8fba16bbb0ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3933 Malicious code in novacredit-global2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08d91b667c736598ff5998d53a62bc833b8a740b0cd678a4ff9b2a33c99866a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in novacredit-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6fe3770a3715553aac610a4c183864336d469e9cd4e73d632c9cd788b3b1eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...