MAL-2025-5841 Malicious code in xpvnsulc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88e144cce5913bd8b818e88d9308fd1c10c0c7d58d905c8e570425d7c5f7ec49 Any computer that has this package installed or running should be considered...

MAL-2025-6212 Malicious code in prospects (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3937cc0353b0952f14ff2d9e68216f857e4ffc01f688f600948c6d1b234915a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5837 Malicious code in test-package-avinav (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db665678ac908b6f9aa76ef069759ebd70b62c901a6f840b765ba7cac299c423 During installation, a heavily obfuscated code is executed. Exact behaviour unclear --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-5832 Malicious code in @pwa-ib/eslint-plugin-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d551b7911958e1076f15bbee358feaed7da5b9aea78210268e6e68261822c7a The OpenSSF Package Analysis project identified '@pwa-ib/eslint-plugin-compat' @ 1.99.99 npm as malicious. It is considered malicious because: -...

MAL-2025-5756 Malicious code in yoomoney-github-landing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14e08c44a9dd94a4287271b74da8909f742693755d7bc3b79fd186cf5163ea9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5762 Malicious code in vault-wallet-toolkit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 038f9aa24c411c91137d75c5519d3628da39a251c2a955d2b651748359a746f0 Any computer that has this package installed or running should be considered...

MAL-2025-5650 Malicious code in @virtru-private/infer-web-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 35f7301737b56efc07185c2e65de66ae841fe901ca967f2ad2d7406d9379cdcc The OpenSSF Package Analysis project identified '@virtru-private/infer-web-env' @ 99.9.9 npm as malicious. It is considered malicious because: -...

MAL-2025-5641 Malicious code in consgraphql (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f1d324f3e26c4f3e05c328b7637cd3e88e8b2878fbc9df6cf039c2c5516332b Any computer that has this package installed or running should be considered...

MAL-2025-5625 Malicious code in plugin-meta-extractor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afae718387e4b2dfc69c8abec1fa53bf680355cc9e412cbeedfa77c47ac2f6b Any computer that has this package installed or running should be considered...

MAL-2025-5624 Malicious code in cmr-graphql (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b805bd73c447ee03b3330e1a1ce27c4b8edef17d58376cd0a35c151f7c1250a0 Any computer that has this package installed or running should be considered...

MAL-2025-5656 Malicious code in malinssx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ec1d3e0940a3c37917b528689547d3728f9f3d0b9e408acc7dcc67435c09d2b0 The only goal of the package is to execute a webhook or a suspicious file during installation. Closely related to 2025-07-0x9xnx - created after previous...

MAL-2025-5654 Malicious code in malicus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d151385056670ff22bfb80dc356c10ff622a77e115f8d81ee5f066220e05fda1 The only goal of the package is to execute a webhook or a suspicious file during installation. Closely related to 2025-07-0x9xnx - created after previous...

MAL-2025-5655 Malicious code in maliinn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dea697dc03b11e99e6895070c9fa053b8db92510a03201f9545dcb25bd373199 The only goal of the package is to execute a webhook or a suspicious file during installation. Closely related to 2025-07-0x9xnx - created after previous...

MAL-2025-5653 Malicious code in hellodista (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 988e08e45c0c2fdbdf337e012d3930d14eedbe4add858a55cee2156849033b90 Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...

MAL-2025-5538 Malicious code in k6-studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b163d493761fa12ed8094157415651ec1b22824f021a7483637346825e08cca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5537 Malicious code in @frontend-clients/design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7fe458099d7b7c0662a9f2283b87071d2afc98b120e402fc20ce916a5b5962ff The OpenSSF Package Analysis project identified '@frontend-clients/design-system' @ 10.0.0 npm as malicious. It is considered malicious because:...

MAL-2025-5339 Malicious code in microviewsharedwidgets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a0d5ab634b9ee74c4cf591a4cb1b7f151f6f7116e6cd32bcfd80464d278f1df The OpenSSF Package Analysis project identified...

MAL-2025-5326 Malicious code in jsmdc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d2c0aff7f35c88859f22a83734bb661c5d66f25262f8c09e97870b387cddbc2 Any computer that has this package installed or running should be considered...

MAL-2025-5316 Malicious code in plugin-api-version (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4f1500b9b02566e5be415a195e434461c5dc160084330f80c8eb4c726a2563b The OpenSSF Package Analysis project identified 'plugin-api-version' ...

MAL-2025-5330 Malicious code in titan-exchange-shared (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcbcec353cd72f56bcc238f2996606b61523a85e851d694e96012a54c027f606 Any computer that has this package installed or running should be considered...