496 matches found
Malicious code in zenith.svg-loader (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f7d2ffc7aca71791695515d2f4c7d4cd7dae2e7767777a5a18bed84f9d94e7f Any computer that has this package installed or running should be considered...
MAL-2025-47593 Malicious code in package-x (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c97a3da4527d6f380ebdc150b7825a38cd9e5f84f7c854b9eabbef547c69c807 Any computer that has this package installed or running should be considered...
Malicious code in @bgrc/kyc-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 491ac58a40b45ff06a00ad44a33a15bd95394c8fde64034d150fb31433a18380 The OpenSSF Package Analysis project identified '@bgrc/kyc-theme' @ 9000.0.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in across-indexer-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fef241ea15f212acce31cd8bcc9d561a7f8a55c8367d778cca91c189d8a3a7 The OpenSSF Package Analysis project identified 'across-indexer-monorepo' @ 7.1.1 npm as malicious. It is considered malicious because: - The...
Malicious code in lynx-dev (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-47435 Malicious code in lynx-dev (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in suchinind (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a328ee17c3878f22beddf954e26fea98cfcedc0377a9aae3f9382b01cb55acf Any computer that has this package installed or running should be considered...
MAL-2025-47393 Malicious code in bsd-form-ui-kit (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-47117 Malicious code in falcon-login (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b99ae21b50a32d57d9c469d91755ecfa18484d7b95f0b61ccbefdf9dbcc1764e Any computer that has this package installed or running should be considered...
Malicious code in hrp9873 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8318f1aafd5605a2f9c075951dc837c3d466baa5376b5685f31432e7597e171 Any computer that has this package installed or running should be considered...
Malicious code in field_capture (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in theia-killercoda-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 327422d1afb4b6b92f4af1ab86ec0f1ca00db649a7e7911231134aa463e1a8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in moodle-core_filepicker (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 949643a56d52397b063c5839facff57f6727e833e3f48ffaa24500c64ac29d53 Any computer that has this package installed or running should be considered...
Malicious code in ngi-core (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-42133 Malicious code in eslint-plugin-rdv-insertion (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6a011f4c21be2958b339f3da564f192dce2329a2d29903a2b0f01933708d94a The OpenSSF Package Analysis project identified 'eslint-plugin-rdv-insertion' @ 7.99.99 npm as malicious. It is considered malicious because: -...
MAL-2025-41819 Malicious code in @hpx-core-experiences/react-my-account-commons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07356e94cbef647858d04baaf3188c3c72ea8ba194c69b6000d0674ccaa1ac71 The OpenSSF Package Analysis project identified '@hpx-core-experiences/react-my-account-commons' @ 11.0.1 npm as malicious. It is considered...
MAL-2025-41952 Malicious code in cameraroll (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in cameraroll (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in editor-script-box (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f28dd5b9539646b395ebc2f66ec29862ccab627cf31e631994ef0ac494ba70 The OpenSSF Package Analysis project identified 'editor-script-box' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...