Malicious code in eslint-plugin-react-hooks-published (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 647dedd2c8ea8a9cef54b85666b74459095d17369da310d54a0c1960f87dafe6 The package eslint-plugin-react-hooks-published was found to contain malicious code. Source: ghsa-malware...

Malicious code in browser-client-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9ad0cf7ca8faf91e654dc6ceb89ca235f191edc099334e5d8cf1a070bfb128a The package browser-client-neptune was found to contain malicious code. Source: ghsa-malware...

Malicious code in airbnb-luxury-messaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3721ccc0b94a8795edd99efa6ea640102c705346c6270a7ac203911797eaa7e The package airbnb-luxury-messaging was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-story-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee587585b5d6ce7a559b01b7ca42796dcd026647cce38e2056a0893bd4c7429 The package airbnb-story-constants was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/logix-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190594 Malicious code in @ra-ide/source-code-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b026a3f908a4875695a81716cd5056c2991f150b9661187eeebd42cdc8577b The package @ra-ide/source-code-frontend was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190520 Malicious code in node-calculator-4e41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13eeb23685dac84d542d197d77303c42cf1157c465348c204b391edca71c782d The package node-calculator-4e41 was found to contain malicious code. Source: ghsa-malware...

Malicious code in node-calculator-9e41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 283c5db462cf0679ba77dc6514f4e2197f08e499ff7ce13c3705a6a3e8cff536 The package node-calculator-9e41 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-190500 Malicious code in com.mixpanel.unity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a617ed7539b6703818676ef051a6c12331b0e014026d1b56fb7d72775d7ad5a1 The package com.mixpanel.unity was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-130038 Malicious code in sari-lapis19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15f42c3186cfc21af0ccae468afe439489bb599f101e687f7607bd4548f91280 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-49392 Malicious code in focusync-custom-controls (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83979de8b383c0a28ec2fea476c2842bafabcb6e5abfe06e4253a9c1ab713234 The package focusync-custom-controls was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in ect-987654-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f07a32f7f265a234c3b4e84eda91976ba6cdb73f979ef22104a70af28bf4a0 The package ect-987654-ctf was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in gear-js-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08293e303cb9ccb253d0503e6c9a51606f052ca75e735030f6985425728f7e69 The OpenSSF Package Analysis project identified 'gear-js-util' @ 1337.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-48757 Malicious code in replit-desktop-release-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aa0c034e3024953db127491a502d64e19cd59000927b5e124c52a6ebc1db8ff Any computer that has this package installed or running should be considered...

MAL-2025-48771 Malicious code in web-billing-code-snippets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0422b49dfc267ebeb2c7b61af5c6ff3f7f8e1c64f7fa0cd123eb5590790eb11 Any computer that has this package installed or running should be considered...

MAL-2025-48550 Malicious code in doppler-secrets-fetch-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae1d785262a986eb630a24e7abcd16bd4c799262e11059e5911a40f184ee5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48749 Malicious code in ofjaaaah-helper-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c29444c36fe6eb68b1d21e6dfa6d59cd4cdf3477983d56e62b4c92d36d60476 Any computer that has this package installed or running should be considered...

Malicious code in @odoreltd/osiris-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32a73b3fd49b5ad7e472425aec55d80718039bee3d41c8a3f9eb7d5fccfed450 The OpenSSF Package Analysis project identified '@odoreltd/osiris-api' @ 5.5.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-48506 Malicious code in simmons (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48486 Malicious code in circleci-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d54b71e0248eb8babb0f78827eff5338450108a9cb2814de5573278a5eac86c Any computer that has this package installed or running should be considered...