MAL-2025-5365 Malicious code in bar.app.bar_rights (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d42cf077f7eef742c0cd55680d97ae121015d7f7a43d7b81fc35ce75333b382 Any computer that has this package installed or running should be considered...

MAL-2025-5422 Malicious code in irradiance (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26991c136a318903b5628c9d72dc626e92359c6e2e22efbd6c656c400974f9d Any computer that has this package installed or running should be considered...

MAL-2025-5248 Malicious code in aog-checker (npm)

Malicious package due to data exfiltration via HTTPS and DNS, and a suspicious preinstall script executing code before installation. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7348f881da3fd51ab1de0082ff6538b4c7882dd76eb460e2f64cac368fadd7c7 Any computer that ha...

Malicious code in ptl-oem-wifi-portal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4042b553c169f3d608add738de30750c0fff9195a89b3f469eca6017a87aaa11 The OpenSSF Package Analysis project identified 'ptl-oem-wifi-portal'...

MAL-2025-5477 Malicious code in web-experience-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2573a173de899b4418c487db0925ec6d4bc915254dbacc39c55f266604d652dd Any computer that has this package installed or running should be considered...

Malicious code in homey-web-app (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5483 Malicious code in wonderland-api-security-plugin (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in web_for_ntu_flag2 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ecs-api-reference (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4969 Malicious code in justsupport (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0717c9c1537a4bbe94634a39a76f580fad3206f21e5b3ec817f61c9384f442ba Any computer that has this package installed or running should be considered...

MAL-2025-4964 Malicious code in zora1abs-mintflow-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d18f03821ee80a129d0fab4014577a7daa8dcbfa000f6b9c8632a0d311b2af0 Any computer that has this package installed or running should be considered...

MAL-2025-5068 Malicious code in wmreact-p13n (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814a26626dc52951567560e4f3f5f6854b8ead5b224ec0b06c421df6a0082584 Any computer that has this package installed or running should be considered...

Malicious code in maxdome-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c0986aac72f989f747d0a8145d5753b02543abc7a3d934919e395c825ac42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5053 Malicious code in react-sdk-module-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c328baa339da0fb222b6ed839e9e024e3df2427f155e95d650451d9a7c0d49ce Any computer that has this package installed or running should be considered...

MAL-2025-5052 Malicious code in react-redux-hydra (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in plonkscript-ui-project (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c977dd9beb9d0a79deee319f92b4d206fc255a28241815672b07694561aa6272 Any computer that has this package installed or running should be considered...

MAL-2025-5028 Malicious code in console-color-nodejs (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5022 Malicious code in @jito-lab/provider (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5035 Malicious code in izat (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d4b31edff23083b4856a85c28082ba87105b963e68ddc7abd96a799d5594b09 Any computer that has this package installed or running should be considered...

MAL-2025-5032 Malicious code in error-ux-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476bc83dcd99575742060ce7a3f129b15a4da89c0605ae7b4eb57e4cef54bf8b Any computer that has this package installed or running should be considered...