MAL-2025-4793 Malicious code in lichess-db (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 475d752d815f7e78b4625da2eea3b8f39eab9a81a1fd93dd56d2d3aab31c379f Any computer that has this package installed or running should be considered...

MAL-2025-4753 Malicious code in my-headline (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ceef507a7783e91b9901900d55040847c4c3866b6da30892e317299f295b3da Any computer that has this package installed or running should be considered...

MAL-2025-4759 Malicious code in prod-interno (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4035c6d117b770c0967c5755bf98b52e5b1545995f5af7e8d0f470556b0b4373 Any computer that has this package installed or running should be considered...

MAL-2025-4747 Malicious code in internal-auth (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6993797579f8f069d60fca14d78ba83e317c578b85e1d0d6c89b395247d0bf1 Any computer that has this package installed or running should be considered...

MAL-2025-4769 Malicious code in test_for-pentest_test_dependcie (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-4651 Malicious code in parabol-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82468091c3a867fd7981eef0555f14edc29822f932782c0fac1bf9e67a15d7e Any computer that has this package installed or running should be considered...

Malicious code in yasssinhami (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-4772 Malicious code in yasssinhami (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-4766 Malicious code in swap-token-list (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4485 Malicious code in ideals-views (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b431166595255a46759ecab498e49f019b7714c5000ad452f14345bef36264ab Any computer that has this package installed or running should be considered...

Malicious code in miro-plugin-tag-crawler (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4569 Malicious code in miro-plugin-tag-crawler (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4574 Malicious code in primereact-sass-theme (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc148ba6f2b6ad7d439003a3b980ba24d27a619fda1198bfa32adfc54d5bb350 Any computer that has this package installed or running should be considered...

MAL-2025-3967 Malicious code in maddddddterialxtest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fba69f39bbe6232d97fbed1db9a38bd6a0de496acb93a26672b5bee18a28a307 Any computer that has this package installed or running should be considered...

MAL-2025-3972 Malicious code in symphony-binary-confusion-matrix (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61ffb1d10faf9a2d8bc7c3f55a5c7146e5a6833835949292e731ba365a15aacd Any computer that has this package installed or running should be considered...

MAL-2025-3787 Malicious code in @tribal-worldwide-london/fa-loggerpoc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c2b02d36686d509631c81c6819591882b08669280e57ffa860ab764a26e55a9a The OpenSSF Package Analysis project identified...

Malicious code in @styletime/eslint-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @gfgtech/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84be24a70b7b194bd9b506eb47c9e8b14d609c4dacff0fe05c46440b18ebcc58 Any computer that has this package installed or running should be considered...

Malicious code in ui-platform-base-components-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b86eb50d9103e65b5af0d24fc0da1302ab769b008a7a2d7c46d686a0fca6d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3380 Malicious code in besec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f4637511caaa8fbdf877671d4abfc117aa6ef86436b35652d7d1a842ac558a6 The OpenSSF Package Analysis project identified 'besec' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...