MAL-2025-725 Malicious code in victory-native-xl-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9101dd18b0880eb5358d74e5a997f3a532b49825b6a4cb47d96778143a48b4a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-596 Malicious code in home-assignment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 243807d7ae6247f1bee104dab17a677c3ec10064973a5ac7b3e5f4ff2753d35a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testbcms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 992b63c655205db655d1d67e1520392056934475ceef3b2d77371f64618d8fb2 The OpenSSF Package Analysis project identified 'testbcms' @ 1.3.8 npm as malicious. It is considered malicious because: - The package...

MAL-2025-592 Malicious code in kuvvet_poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a15f57daa0dfb5fe047124342523add2a4d20eebd28713661823ae555930135 The OpenSSF Package Analysis project identified 'kuvvetpoc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-591 Malicious code in theice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a5284ff23f0c6a6b960f00ae8adcf8fd068d714b2689229fa6355a69fc5d778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-590 Malicious code in sandstorm-widgets-nyse-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 521032aa86f84d6ee0bb3ad2b7b97e43683ed2040212f5b7cb5359f10549fea6 The OpenSSF Package Analysis project identified 'sandstorm-widgets-nyse-website' @ 7.0.1 npm as malicious. It is considered malicious because: -...

MAL-2025-607 Malicious code in tomcrypt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b12e31166b9da18d6c4615c1c464ce1a94906441a1501a3d77e03b0b44092f86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-588 Malicious code in @adsk-forks/jsonpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b3b2039104a753b08abe81f7754ff405d8e3206c92b7251c857b28e3431fdc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-606 Malicious code in nord-security-task (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ffe2bd7d3ef7fd741f0a023ccfc4b06f7d44240710724da3048ed61dc1e7e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-test-121333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ed3e1b0420eb26040693b16a06bc6803942f127119fd8cf4082268891ea0db5f The OpenSSF Package Analysis project identified 'test-test-121333' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2025-586 Malicious code in test-test-121333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ed3e1b0420eb26040693b16a06bc6803942f127119fd8cf4082268891ea0db5f The OpenSSF Package Analysis project identified 'test-test-121333' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c7d0ea07d51fa1a590737fa0586578db983b776c21cb15f0597463d7046dea8 The OpenSSF Package Analysis project identified 'meli-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-560 Malicious code in lyft-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcca40856d5632be95c3559613e9df39dfaacc71fb02c8004abd5dd44714670a The OpenSSF Package Analysis project identified 'lyft-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-546 Malicious code in meli-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 152f98442370419a0e0c3fb36c2e01d398741677238bd205877b136806a6922b The OpenSSF Package Analysis project identified 'meli-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-544 Malicious code in meli-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb28bf7bab07e7d8ce966bd32c13cf1917b50adade7a33b66bb6e39c74710827 The OpenSSF Package Analysis project identified 'meli-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb28bf7bab07e7d8ce966bd32c13cf1917b50adade7a33b66bb6e39c74710827 The OpenSSF Package Analysis project identified 'meli-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-539 Malicious code in lyft-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-540 Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lyft-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 115bad0fa70cde21c6adc84e89cc502d81a28568a9b34867b1fcad432dc49050 The OpenSSF Package Analysis project identified 'lyft-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in meli-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52e53ccc9088219b5062b6ceac1a6d716fc2700eb4110e523cf08592c472d78e The OpenSSF Package Analysis project identified 'meli-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...