MAL-2025-5176 Malicious code in tap-bar (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80f415a4d7c9d782ada5f5ee7e58ff393f870157306c8a90d325fcd796825e6c Any computer that has this package installed or running should be considered...

MAL-2025-5241 Malicious code in taskcluster-db (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 015560a72e308c3ba1770533176ac7fe0bcfbe4892581829992ee47063774f5c Any computer that has this package installed or running should be considered...

MAL-2025-5010 Malicious code in globalloadercontroller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81e00ab168835949314e8a396c7bda27efb18804270a189087903da2a7f1a4c1 The OpenSSF Package Analysis project identified 'globalloadercontroller' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-5007 Malicious code in reoregistration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 78444474811c971e219548f0c559d06bef5a4e4cb65703c5ad604ce64f3d0a4d The OpenSSF Package Analysis project identified 'reoregistration' @...

Malicious code in odyssee_teams_api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9634a76d594664463c45445417dd33af9980310ff86b362704e5b0b50daed079 Any computer that has this package installed or running should be considered...

MAL-2025-5001 Malicious code in ripe-grs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a9dcae56aa553fbd3ac26d68ec192342012f6cdf9d82443a1cc08f76d037c1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in comp-base-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86dd56ba61a953e19112e8fd19d04c755f48e262186426a358a7251dc398406f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in soufianewldnass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 943431cd355a8b989bd535cb608ec701be5ee1d606e4ecb7bcf010d4b9d3ee69 The OpenSSF Package Analysis project identified 'soufianewldnass' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4950 Malicious code in maxdome-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c0986aac72f989f747d0a8145d5753b02543abc7a3d934919e395c825ac42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uniswap-v4-scratchpad-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01754c5d133c195a4c109504b5db8355893e90a308a2317d421d8f2d034cad23 Any computer that has this package installed or running should be considered...

Malicious code in fin-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef9a10c09cf18a155ebac430e436ab4c59017c72a1948cea3cbc1b70815cd8a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4720 Malicious code in sess-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d881da182c700bdb8c7c87dfc1b74eb7fd669c9905fdbdbafd08ed876b644959 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4711 Malicious code in bank-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0763ca6a35d86ac26d0d79bf3170ea38a642062f030c19ac17589065a5e1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in virtru-design-params (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c17dc3a9d15ee9a1acba1ea2eac04dd9544e09908d2014fcb8b9c689ba07c29 Any computer that has this package installed or running should be considered...

MAL-2025-4670 Malicious code in world-id-lens-dapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d27d63976b7108297f8d9a29062b3add9973c83849fd5ab7cd8fbd31b0248701 The OpenSSF Package Analysis project identified 'world-id-lens-dapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in checkout-sparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f5576b93b0dbfc8f72fa10da0b8b43e6ba0e801c71d51807996063ee1f73f84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4664 Malicious code in new-presentation-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542a173ba956753bc3d1570cb407b09ae92c7d5690bfacf0aa1bc2aa01f94990 Any computer that has this package installed or running should be considered...

MAL-2025-4663 Malicious code in minimal-ts-webpack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1cf4c25b4f12d9dcd4bc5b39db0936c0be665009239c28b85696d1a55fafa36 Any computer that has this package installed or running should be considered...

MAL-2025-4624 Malicious code in inter-frontend-svgs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cef0c87cb238b6a66e63b6ede215bd1d867b47ff3bcad84258647d55c810c520 The OpenSSF Package Analysis project identified 'inter-frontend-svgs'...

Malicious code in bombombombom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4feeabe972dbf8a97f4ab7dc12a732e46cb7ac49559cccdb432dc3513b3f6c38 The OpenSSF Package Analysis project identified 'bombombombom' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...