Malicious code in doppler-secrets-fetch-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae1d785262a986eb630a24e7abcd16bd4c799262e11059e5911a40f184ee5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-all1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9b13c552c50461f4b3a7a423bf9fc79e3a5ea1c36d107ecd7536223789616aa The OpenSSF Package Analysis project identified 'test-all1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in stopme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c64e2664020a21b1ba2591990d854c1b1f8e37b00d8e6bc91f1e8703d5f9416 The OpenSSF Package Analysis project identified 'stopme' @ 17.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in taxify-work-profile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46f9db2231e68ebc03c3b566274d3bd3c0d6510f29c5eec6c83c1fa41806009a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48457 Malicious code in src_dev-tool_index_ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c5f130294b305df1adf1e497c66d81ec09ddeffb8bb6d0c486644336706558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48458 Malicious code in src_plugin_index_ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396cc58d08775057aef35e59ad51a28c7379449f6f00332d193138ff8b9de09a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48452 Malicious code in src_components_qcreport_index_tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f986d5a9a1aa2f94ee01161e75bbf71a7367b9fa7f1a00f86ca9c55cc73b655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deere-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355a3e4ff7770ab39aebef0eb84829ba45685d6fe842518c585de20021b505f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isg-iwp-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99ea1f73a0a8a60395dd908d6a970f8ab7861bec1eb627b70023c9716185ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in corp-ais-client-my-channel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5c6a2e2c6632d11abe65b902c4dee848386ec4240aba0fee8f76983ac4ff56 The OpenSSF Package Analysis project identified 'corp-ais-client-my-channel-lib' @ 99.9.10 npm as malicious. It is considered malicious because:...

Malicious code in aps-configurator-inventor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fc3df70de166c4b79ec8915577d7b560a414f73999a8d88efa7c0bfa59b1733 The OpenSSF Package Analysis project identified 'aps-configurator-inventor' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-48314 Malicious code in my-unique-package-here (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19289cab4482d99ed5e7a74abf6e380b1336b01b89502d23f3a63398b077f128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48093 Malicious code in optional-native-module-abc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...

Malicious code in v0-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823ea0633ff002d303ce7a803d2ae0f945f97a935a6757338babb0a483a2f710 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48086 Malicious code in v0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71d07f2261c23ad9fe0c5b269a07b716f10747239391c989fc1979b322b68b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vercel-v0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b3f5d72ec9c31838366e2e5e38f08021d40aa495b4424e97ff5b580a24467d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48091 Malicious code in vercel-v0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b3f5d72ec9c31838366e2e5e38f08021d40aa495b4424e97ff5b580a24467d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v0-next-shadcn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5e9e552239df0cdd60e60db1ee3aa37558a7ae490767639b25d3932079c8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48088 Malicious code in v0-next-shadcn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5e9e552239df0cdd60e60db1ee3aa37558a7ae490767639b25d3932079c8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aviatrixdev/flight-suit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dc9bc5d34874a3f8d1af5ce792a55535218bde1497f02e6e1d0e0f7264a25d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...