Malicious code in apple-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc09ddd705cb61fae251b9ef88db7a9237d08d212eb332ee3ad9d511ecdebae7 The OpenSSF Package Analysis project identified 'apple-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-377 Malicious code in amazon-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2f3fdc024f82b11d080d27e18dfe206e477583ec84c8f2268b9e275c9bb36d7 The OpenSSF Package Analysis project identified 'amazon-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4127486bd0cb05750c82045767db0554a5756fc8dad2794d13ce5284ebf4bf4c The OpenSSF Package Analysis project identified 'amazon-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in collapsible-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a424d4fcd62d35f9e9da962931dbc5fd39e9bfc3b4744a5f00c5e442b2ddb36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in no-style-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9044d80b8ff33b0d2a50511386c0fed003004f9452211938b949aca211b0866 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ebay-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90f4e5751e5f6c07e15364668fd8d7068811404a8ba15818099e884f880adbed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dell.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 615b5542a30acb872c70cdfcd28099420c22dd3edecf21285afee3a811f3e967 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bigcommerce.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f610f94d4adf4f1e09e9727a8c6960c6b9c0bef8733be71242a3bfdad135f55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-325 Malicious code in wallet-history-demo-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58e10d053f3cba02a172ebaf54943b9da709bd08e031437c58279fd60849064f The OpenSSF Package Analysis project identified 'wallet-history-demo-backend' @ 1.1.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in built-with-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f426ea9ad545f39f1e84cd26ee384b096d08c2b82f8b3554f97fc1ce85fac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canva-connect-api-starter-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b678e20c1bba076695f221d78bccaa03e07883cd72690dcb6bf357845c03d3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apple.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee0a2d69b5b37d8393a5a3015d9baf3404208025ac3ce6e0d174b5b50053e34c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testpacke (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b837aa65eec730e3f6478200b0f279baef7aab09893e795b1173e13a686837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in showcase-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72fdeda4a40b1170fc3888255d22ac1cb9cfe37834663d8a5812539c21e7c8e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-native-apollo-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 643d99775fbe5d1e11235967329b1d9bfdd5f173b113db79c998b0ea7f2b7b3c The OpenSSF Package Analysis project identified 'react-native-apollo-devtools' @ 1.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in snapon-imageviewer-lw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7053e8d93acd05ac2454f25c628ab30c641d481373e8f20a08b28a0f66e1fe38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in keystone-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d1e499fbcaddce6bdea8ab5e0bf4a301d23b6db8e65cb2647376df41c9850cb2 The OpenSSF Package Analysis project identified 'keystone-app' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in alchemy-web3-webpack-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0baf7db6925882a96eddaa00b4877f9147183d9b00a85fd69b02e5fe625f7ff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-ecommerce-shopping-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a28c4bb6f1ccd57758357f7949eda10b66b8dcc6c7249a4b0756f28d5517369 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-35 Malicious code in digitalexp-lowcode-runner-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff497f2370d8b4d0bbe77fb825c837cdd2a57a506ec952b2a4e3ba78f273d1b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...