MAL-2025-41406 Malicious code in server_msg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c915f51661674b9cbfd2e897a3d15c0682ceb1ddd99b4b6b70e3d9eee48f1c3 Any computer that has this package installed or running should be considered...

Malicious code in typescript-4.9 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41345 Malicious code in prettier-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dd4a56ce83136ba0c08709c38d11bee44b0351d7dd9c5bca68b457fcb1b44be9 The OpenSSF Package Analysis project identified 'prettier-v2' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41321 Malicious code in run-scenarios-helpers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 643959f3bad134aeb7e2e5ea40f5f4c01cb16fc0ef02238b81d5f5ee1ef42970 The OpenSSF Package Analysis project identified 'run-scenarios-helper...

MAL-2025-41376 Malicious code in code-processor (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in global-copilot-menu (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41312 Malicious code in msalv2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca3fbaf2aacbd857c8661a88233c1a756fd75c6f60d675a32374d9c95cc019e The OpenSSF Package Analysis project identified 'msalv2' @ 99.0.9 npm...

MAL-2025-41394 Malicious code in msal-node2 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41393 Malicious code in msal-node1 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41289 Malicious code in health-cards-validation-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83454ca0e6e018fdcd3684ad0e163a9220a0e5a2619ea5d348092076d83755e5 The OpenSSF Package Analysis project identified 'health-cards-validation-sdk' @ 99.0.9 npm as malicious. It is considered malicious because: - T...

MAL-2025-41277 Malicious code in donuts.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd852600a317ae1df99af9e6cede53d3f54d36b9a400ca672eff6a7146818a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41368 Malicious code in api-react128 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41367 Malicious code in api-react127 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in kaltura-player-js (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @mz-codes/const (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41258 Malicious code in @bitkub-next-frontend-v2/app-bitkub-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c961401f308dd3c2e7d4639158b0b6c5cf92dbdfcafb06789988dc4824107960 The OpenSSF Package Analysis project identified '@bitkub-next-frontend-v2/app-bitkub-next' @ 1.13.0 npm as malicious. It is considered malicious...

MAL-2025-41245 Malicious code in @cf.cplace.platform/forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be4ed03fbd3f41262f582eab6a80ae6e67fe611301ef8cf9558555a0add3af9 The OpenSSF Package Analysis project identified '@cf.cplace.platform/forms' @ 9.1.99 npm as malicious. It is considered malicious because: - The...

MAL-2025-41385 Malicious code in gbb-kubernetes-hackfest-webui-dashboard (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in personalizationtrkserv (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e171fa4d76ea31b32b21ec8efae81c75a65d7adcc42a621c06cfd5406110131 The OpenSSF Package Analysis project identified...

MAL-2025-6964 Malicious code in tiktok-prod (npm)

The package communicates with a domain associated with malicious activity...