491 matches found
MAL-2025-6047 Malicious code in @toptal/picasso-form (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6066 Malicious code in @toptal/picasso-typography (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-grid (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-dropzone (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-calendar (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6035 Malicious code in @toptal/davinci-cloudflare-requests-handler (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-lab (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6136 Malicious code in wc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0074aa23419396ed1a9fe8acbdb9bac05d585129e3723d4db8a9af9f457096c6 Any computer that has this package installed or running should be considered...
MAL-2025-6095 Malicious code in hg-icons-2 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in marcom-ac-console (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64d378ac078f27f1f0357746b50307c933999c2eb82b5c9c7a7a6b0645910749 The OpenSSF Package Analysis project identified 'marcom-ac-console' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5994 Malicious code in acsascasccsaascascacs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4d29e3ba25b084215e80ac7601a998e66cf11ad88607db37e23fa50817b135 The OpenSSF Package Analysis project identified 'acsascasccsaascascacs' @ 1.0.2 npm as malicious. It is considered malicious because: - The...
MAL-2025-6134 Malicious code in vercel-edge (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 705d265f51a6811b9f95fdbe239738b37767248d5e0b8b66cf689b122f4a96c9 The OpenSSF Package Analysis project identified 'vercel-edge' @ 99.5....
Malicious code in preview-server-auth-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 923e18277dc972e221ab7a161e65c18219ff037b3a347b86f86df7f6cba1bcfb The OpenSSF Package Analysis project identified...
Malicious code in @ivy-shared-components/iconslibrary (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6212 Malicious code in prospects (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3937cc0353b0952f14ff2d9e68216f857e4ffc01f688f600948c6d1b234915a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6123 Malicious code in realtime-next (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in test-package-avinav (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db665678ac908b6f9aa76ef069759ebd70b62c901a6f840b765ba7cac299c423 During installation, a heavily obfuscated code is executed. Exact behaviour unclear --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
Malicious code in matka (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...