Malicious code in ocha-tapai94-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9f8f3721d08f177135a6f90338d52636c1d445b0d7921eccd49a7e7711e0569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76711 Malicious code in ade-lumpur59-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bea8f2d526cfb499576baa7f93363a08efc408504d223a14996f4c200d5ea269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-191643 Malicious code in krisp-audio (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1940a2f9c0907fd633cc07fcc96fad89f2e4c55cbd38d5fe8df09d1c4048c906 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CLSA-2025-1760704001 Update of sudo

Bump version to 1.8.23-10.0.1.3...

EUVD-2025-32649

Malicious code in @pb-digital/ui-library npm...

Malicious code in ngx-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73e8f81aec4f30bf22f2a6e8a25a2662c6a72f8873311399d708ffb8d858f1cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42459 Malicious code in @dramateas/labore-maxime-ab-harum (npm)

The package @dramateas/labore-maxime-ab-harum was found to contain malicious code...

MAL-2025-12048 Malicious code in @zalastax/nolb-ipf (npm)

The package @zalastax/nolb-ipf was found to contain malicious code...

MAL-2025-14631 Malicious code in ape-staking-public (npm)

The package ape-staking-public was found to contain malicious code...

MAL-2025-30643 Malicious code in project-xhjrn-delta (npm)

The package project-xhjrn-delta was found to contain malicious code...

MAL-2025-25036 Malicious code in leadconduit-militarydotcom (npm)

The package leadconduit-militarydotcom was found to contain malicious code...

MAL-2025-13011 Malicious code in @zalastax/nolb-parsj (npm)

The package @zalastax/nolb-parsj was found to contain malicious code...

MAL-2025-17854 Malicious code in cvzqpakkwuexjydi (npm)

The package cvzqpakkwuexjydi was found to contain malicious code...

MAL-2025-26164 Malicious code in meissa-mysql-pipe-europa (npm)

The package meissa-mysql-pipe-europa was found to contain malicious code...

MAL-2025-12557 Malicious code in @zalastax/nolb-ngx3 (npm)

The package @zalastax/nolb-ngx3 was found to contain malicious code...

MAL-2025-32711 Malicious code in saturn-infinity-eic765-project (npm)

The package saturn-infinity-eic765-project was found to contain malicious code...

MAL-2025-27376 Malicious code in newhelion (npm)

The package newhelion was found to contain malicious code...

MAL-2025-16822 Malicious code in charlie-mike-victor-taetl (npm)

The package charlie-mike-victor-taetl was found to contain malicious code...

MAL-2025-29383 Malicious code in player2.1tv.com (npm)

The package player2.1tv.com was found to contain malicious code...

MAL-2025-11042 Malicious code in @zalastax/nolb-crypx (npm)

The package @zalastax/nolb-crypx was found to contain malicious code...