MAL-2025-47909 Malicious code in nilepkg6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db211445ec3d3ca5848bb58911ca2195d168f2efdc976ce10c50e3b43a4bf4ff The OpenSSF Package Analysis project identified 'nilepkg6' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in dify-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d98e6fba7e9370347c73e0d316cbd3fb83b1cb2e50f5e17a6423d321afa21a59 The OpenSSF Package Analysis project identified 'dify-web' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-47907 Malicious code in dify-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d98e6fba7e9370347c73e0d316cbd3fb83b1cb2e50f5e17a6423d321afa21a59 The OpenSSF Package Analysis project identified 'dify-web' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in lc-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a284de978132b8c4d648fba52f9b1c5393d9988773103c1d56302dfe19cacf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @peterwiener/l (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 951ad8532d62f01f70b12691dd0d29e381cbee9f8848da6351d52ea2fc54b3a9 The OpenSSF Package Analysis project identified '@peterwiener/l' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in trendwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdcc4e365d2552163150eaf2fa138c0275533d653441752a4eb49ac5087100fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in phoenix-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47823 Malicious code in phoenix-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47826 Malicious code in rc-phoenix-tpp-upper-funnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commondatalayer-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ade9f77c27855eda32e445a304d4f4bd3f00bc8cde8b1cfd8b6785f958a702f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47820 Malicious code in propeller-solver-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a79fc2ce4f8dbef3a36ad1dcf36011f9d86435f347aa81ed601295d75e818b04 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in rack-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486f75e4ca656b6182f940e14f4a16bb48bef108e68163afe3f0ecb9d65465ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47863 Malicious code in test-prob-to2324 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4628b79fab4d286704a53af4e8df8cc72149ff0b04b72d4a8ec23983ed62f92d The OpenSSF Package Analysis project identified 'test-prob-to2324' @...

Malicious code in filecoin-checker-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6196805b97dfa338fede5b1f871b87e26bfe4909ed5ac6a26c580e29f40cd85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47513 Malicious code in @bgrc/kyc-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 491ac58a40b45ff06a00ad44a33a15bd95394c8fde64034d150fb31433a18380 The OpenSSF Package Analysis project identified '@bgrc/kyc-theme' @ 9000.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in across-indexer-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fef241ea15f212acce31cd8bcc9d561a7f8a55c8367d778cca91c189d8a3a7 The OpenSSF Package Analysis project identified 'across-indexer-monorepo' @ 7.1.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-47509 Malicious code in syf-api-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a990f780ff2003775ab94c7c9d7b8cf3cf81b631fb625b0a827abd24076e9e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47460 Malicious code in circuit-retained (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71eb6f38e5fe1dce06d13f2ba4d58e8a3addd8b17b529b327d02f34b54472cb5 The OpenSSF Package Analysis project identified 'circuit-retained' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in libvirt-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2071f9220268a6478afd2c0c3f551190b1ac0eec255abc1d5e1dbc35744e5e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47426 Malicious code in playground_root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5ac61f295a55d3954f84caefcd0b84187f168266243137208bba3f2e77f4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...