MAL-2025-6769 Malicious code in thisisthedaventestpoc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in internal-newrelic-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in node-calculator-splo (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in cycalculator-ye51 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in undeface-test-1 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6679 Malicious code in xo-angular-ui-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17c1ba74b83fb3a51e171948d55aa626342a1477d24f1f0f768f093cba5feef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6695 Malicious code in amdocs-core-package (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...

MAL-2025-6765 Malicious code in tableau-redirection-service (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6688 Malicious code in @sangith/eslint-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in icaret (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2390fae7771a778a8bf020a3313113b56c56383c2178d916748a8d959678c9e The OpenSSF Package Analysis project identified 'icaret' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-6746 Malicious code in nubank-www-latam-commons (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ef98f115341b4b410449098489bee4471969a706dfe619a9d7704d26fa5a1f The OpenSSF Package Analysis project identified...

MAL-2025-6781 Malicious code in weavejs-backend (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bridge-emulator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6701 Malicious code in bridge-emulator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6731 Malicious code in internal-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6699 Malicious code in blanl-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in hw-transport-node-hid (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in edenx (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @azet/api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b2841cc52f86348bb048d0fc7dd2dba1253653dd003f68552f72f67ba3953ec The OpenSSF Package Analysis project identified '@azet/api' @ 1.0.0 n...

Malicious code in testing123kk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bebd39f4de86af5e9634fbfda5f8c97794b597b1066c2fcd32e3a2068569280d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...