MAL-2025-41245 Malicious code in @cf.cplace.platform/forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be4ed03fbd3f41262f582eab6a80ae6e67fe611301ef8cf9558555a0add3af9 The OpenSSF Package Analysis project identified '@cf.cplace.platform/forms' @ 9.1.99 npm as malicious. It is considered malicious because: - The...

MAL-2025-41385 Malicious code in gbb-kubernetes-hackfest-webui-dashboard (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in personalizationtrkserv (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e171fa4d76ea31b32b21ec8efae81c75a65d7adcc42a621c06cfd5406110131 The OpenSSF Package Analysis project identified...

MAL-2025-6964 Malicious code in tiktok-prod (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6961 Malicious code in symphony-summary (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6870 Malicious code in @angular_devkit/build-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...

Malicious code in dependerable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f710204dca1899f1d3c1289dee4a05e791bfd14fdbe3678e52d4caa62869d816 The OpenSSF Package Analysis project identified 'dependerable' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6863 Malicious code in dependsalotxyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6ff0f63ebfa845053f988e1f56a87392c7ea6f7907895f0551ef3ee32da38fb The OpenSSF Package Analysis project identified 'dependsalotxyz' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6944 Malicious code in mm-scss-utils (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in symphony-hierarchical-confusion-matrix (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6827 Malicious code in mda-localise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 613478d63b9c28c110cb883d28d216af5ac0cc3af224415eafe463a905b391c3 The OpenSSF Package Analysis project identified 'mda-localise' @ 0.0.2-placeholder npm as malicious. It is considered malicious because: - The...

MAL-2025-6826 Malicious code in microsoft-bonsai-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f75eaf29b0dbada65bcac01f3d2789298d785098ab86d180232abf37a1e16070 The OpenSSF Package Analysis project identified 'microsoft-bonsai-api' @ 9.9.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-6823 Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

Malicious code in sendbird-uikit-sample-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in criteo-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a71052dd6a243d5cbf33f701f287777125ed237e9d9b2e750874fea97a0d7618 The OpenSSF Package Analysis project identified 'criteo-video-player' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-6839 Malicious code in gik2-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6769 Malicious code in thisisthedaventestpoc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in internal-newrelic-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in node-calculator-splo (npm)

The package communicates with a domain associated with malicious activity...