496 matches found
MAL-2025-6727 Malicious code in hyperion-react-native-testapp (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09dade0de8238a15a0ae8541c47a5178f3234eb654cc6afe58eaf02600ad4d47 package.json declares a preinstall lifecycle script that runs wget at npm...
Malicious code in internal-logger-embaby (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6721 Malicious code in events-web1 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in react-native-at-internet-example (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in work-planner-client (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in onboarding-lemonde (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6248 Malicious code in foundry-jupyter-extension (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8114162af3676e6c75f96e1dc953dae363e41fab4e9b3ce75a84b261aece0113 Installing or importing the module triggers exfiltration of environmental variables --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
MAL-2025-6291 Malicious code in latam-xp-analytics-plugin-absmartly (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6309 Malicious code in scheduler-experimental-builtin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5c381d132dddf957ca46bcbb357f4d138089323733e00e65f2e13d7ac84fc23 Any computer that has this package installed or running should be considered...
MAL-2025-6292 Malicious code in lu-anywhere (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in binance-dev (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in rcepoc (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6225 Malicious code in xk6-top (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14bf109f34ed2a77090e261e001bc285f9e3c59006cb9c2ccf14f34fda5ff61e The OpenSSF Package Analysis project identified 'xk6-top' @ 10.1.1 np...
MAL-2025-6317 Malicious code in testandooteste (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6285 Malicious code in flash-hros (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6120 Malicious code in pro-stocks-widget (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6083 Malicious code in cosmjs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76cfd30c52a126f1b3dd180a97192143c9bd72a807c75e0d458a02ede65eb60e Any computer that has this package installed or running should be considered...
MAL-2025-6101 Malicious code in jsr305 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6092 Malicious code in grammarly-editor-sdk (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f24713f82fc90957a8e5834da2735094adc919b65b81f569360b9b8b1c284873 Any computer that has this package installed or running should be considered...