Malicious code in isctf5 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ded9b3952043478fcfdc7ddc981925d7e31160b4a096e205cf35950e5787d2a2 Any computer that has this package installed or running should be...

Malicious code in isctf17 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc935bae7f6f14d33043543fd5ea79225029b59cb212cb9e7336f98619afb98c Any computer that has this package installed or running should be...

Malicious code in isctf3 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef062f634bf94ff3d92de69f61ddc08a1d9351db44ff84be85fc5eba8c05b23 Any computer that has this package installed or running should be...

Malicious code in transaction-report (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1c40d933bc68a269e1fe8750bef686c53bbc78251b864aec8d83093a175fcac Any computer that has this package installed or running should be considered...

Malicious code in google.kythe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd92576cb52e3439544b9c66be7914a1f7326c8ac3ab1ab692d694ae00d5806 Any computer that has this package installed or running should be considered...

Malicious code in @zohaib2121/dtapp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27f5d74d5d130aff4fd7d231b3d9cd57faedebb2a8cc7f462d33e36d00764d50 Any computer that has this package installed or running should be considered...

Malicious code in eslint-v9 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d46f607d02591ccf25f4bd27e192a7f99206ed9e37dba6c62189bf0945f600a6 Any computer that has this package installed or running should be considered...

Malicious code in backpack-foundations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4bba8fcd3cb3b4c99abd7a1cff3ddb0e0c15a179005fbed75b0441572a2dad1 Any computer that has this package installed or running should be considered...

Malicious code in flight_lab_control (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5d324357d4041717da0277420513760dccbba17821ed9538aa033304d5f073 Any computer that has this package installed or running should be considered...

Malicious code in jaeger-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f04434e6edf034f78f31f1b79371ae9218b708a68c422adb97016129e0d42b9 Any computer that has this package installed or running should be considered...

Malicious code in org.cocoapods.csv (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3d922335d96d21629591f3c06d391cc64ca4117561dcb9711fb65451dd841e Any computer that has this package install...

MAL-2025-576 Malicious code in ig-lighthouse-to-influxdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92e8d076b669d18ea59535f03270a27adbfc6b0717789403453fabeb522b988b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-566 Malicious code in airbnb-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58a64fdd730093f2e15a4208e7c8c3a330b7ba9fd2d264fe0a334a530695a5ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testidneel-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2d741fc56c242ce7ac9590ccfe8a91cb20e28e9e9a3fdc9ac721258723cc082 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in self-bots-dc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d57d5a05bea1dda9fbc71d4016a47c33f2a89150eef13a97d587db0329a7e7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in op-vscode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc75870385e27f624816db6a388a5a188640a523bb7d967dbb848ac33dda21b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tour-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44bfdd42ccd9f1335cf7f7b07ba399341a0a93af1c683563cf6a63697518f580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in request-external-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57b443887e773384068e114f407f70b10c0278c6839c0d5c34f2ba575a63a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-bsv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ff426abeac1a362b4c6e28dcb79500a3081d0b1b5c4fa0945805a55b97adf05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in design-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a127fa5f9bae939a2e9a5c9f4dd17b801b5dad70a7299913ac5245397aeb519e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...