MAL-2025-6765 Malicious code in tableau-redirection-service (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6688 Malicious code in @sangith/eslint-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in icaret (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2390fae7771a778a8bf020a3313113b56c56383c2178d916748a8d959678c9e The OpenSSF Package Analysis project identified 'icaret' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-6746 Malicious code in nubank-www-latam-commons (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ef98f115341b4b410449098489bee4471969a706dfe619a9d7704d26fa5a1f The OpenSSF Package Analysis project identified...

MAL-2025-6781 Malicious code in weavejs-backend (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bridge-emulator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6701 Malicious code in bridge-emulator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6731 Malicious code in internal-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6699 Malicious code in blanl-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in hw-transport-node-hid (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in edenx (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @azet/api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b2841cc52f86348bb048d0fc7dd2dba1253653dd003f68552f72f67ba3953ec The OpenSSF Package Analysis project identified '@azet/api' @ 1.0.0 n...

Malicious code in testing123kk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bebd39f4de86af5e9634fbfda5f8c97794b597b1066c2fcd32e3a2068569280d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6727 Malicious code in hyperion-react-native-testapp (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in internal-logger-embaby (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6721 Malicious code in events-web1 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in react-native-at-internet-example (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in work-planner-client (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in onboarding-lemonde (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6248 Malicious code in foundry-jupyter-extension (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8114162af3676e6c75f96e1dc953dae363e41fab4e9b3ce75a84b261aece0113 Installing or importing the module triggers exfiltration of environmental variables --- Category: MALICIOUS - The campaign has clearly malicious intent, like...