MAL-2025-41258 Malicious code in @bitkub-next-frontend-v2/app-bitkub-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c961401f308dd3c2e7d4639158b0b6c5cf92dbdfcafb06789988dc4824107960 The OpenSSF Package Analysis project identified '@bitkub-next-frontend-v2/app-bitkub-next' @ 1.13.0 npm as malicious. It is considered malicious...

Malicious code in foundry-jupyter-extension (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8114162af3676e6c75f96e1dc953dae363e41fab4e9b3ce75a84b261aece0113 Installing or importing the module triggers exfiltration of environmental variables --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious code in hardhat-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3593917b9125465c1d3c5d6b38c62a9819d7590aea1522bdcf400ffef560a9b7 The OpenSSF Package Analysis project identified 'hardhat-contract' @ 15.0.0 npm as malicious. It is considered malicious because: - The package...