74 matches found
MAL-2025-84897 Malicious code in eka-nasiuduk81-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390ed255a4dbd8a4642bf1f11c9794ce0dbaa9b1205584bfa27f279e2849370b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-91069 Malicious code in tiara-lapis65-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fec5d2afd30ac7133dfc80ced5d21f50a4431466e668d2d454adfd6ac5de86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in fajar-bakwan14-breki (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f454dbfdef179e3846302fca4c56bc9eb2d5417edcced65e0a6d80b92348b34 The package fajar-bakwan14-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...
Malicious Package
Overview advertising-charts is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-12405
Malicious code in bioql PyPI...
MAL-2025-47859 Malicious code in pmcrypto-v6-canary (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2beb98aca8567faa795ae52a4cd215f22c267e86cc52978ec3f3136a3c969e8a Any computer that has this package installed or running should be considered...
Malicious Package
Overview @js-to-lua/handler-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Embedded Malicious Code
Overview @duckdb/node-api is an API for using DuckDB in Node. Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected malicious code...
MAL-2025-43280 Malicious code in @zalastax/nolb-lini (npm)
The package @zalastax/nolb-lini was found to contain malicious code...
MAL-2025-45604 Malicious code in promise-with-resolvers-polyfil (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aaa40ddd391e49632fb8ff493e7aab475c4004635e41533ea6b7223e96b29f5b Any computer that has this package installed or running should be considered...
Malicious code in @zalastax/nolb-_rao (npm)
The package @zalastax/nolb-rao was found to contain malicious code...
Malicious code in @zalastax/nolb-_wik (npm)
The package @zalastax/nolb-wik was found to contain malicious code...
Malicious code in badvideo (npm)
The package badvideo was found to contain malicious code...
Malicious code in dewanto-dodol7-kuki (npm)
The package dewanto-dodol7-kuki was found to contain malicious code...
Malicious code in fdaeqmrptxkjuiwc (npm)
The package fdaeqmrptxkjuiwc was found to contain malicious code...
Malicious code in qualmeuip (npm)
The package qualmeuip was found to contain malicious code...
MAL-2025-36288 Malicious code in test-mlw2-sooty-batik (npm)
The package test-mlw2-sooty-batik was found to contain malicious code...
Malicious code in vlocate (npm)
The package vlocate was found to contain malicious code...