MAL-2025-47425 Malicious code in storj-satellite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a2cdc91ce66bac3ff8836be68fb784bbdf468eed157c29548ca788ae8669b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47427 Malicious code in tml-footer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00452b25be1612714f1d3a1de19a9429e6d4f1d0c2450103ce3791c2d27ff72a The OpenSSF Package Analysis project identified 'tml-footer' @ 99.9.9...

Malicious code in updox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dd4f7a8300a1eb6ed1be834e8cbec76f95c8eb7325192124ad7379896c9a0b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kreme-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b37346bf5501afd9654bd64f028afa11d20457e237fb2b45a4bff318617c64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47129 Malicious code in kreme-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b37346bf5501afd9654bd64f028afa11d20457e237fb2b45a4bff318617c64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cnx-ui/cnx-ui-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87e84454809b6a23abcd234d62b4b3630bd69cf9c89b02f5e5f8c16204712981 Any computer that has this package installed or running should be considered...

Malicious code in eth-exec-txs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 288cdf368821283de11f98ec0f9c5d0daf500ed6be174fd0c3c7811d4346cf1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47092 Malicious code in @cryptochords/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0557b94cb12763b7d0b2bc1fbfea247c656476c068c2bf2161f8fa35ce3254cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47099 Malicious code in moduletestsimple5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 863c45993e52cf53af1214fe7d49bdf3b9d7f88da6e2df1aff079e0000dfc9f4 The OpenSSF Package Analysis project identified 'moduletestsimple5' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in tdm-shared-core-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f40d5eac324a286d10c565745ab72ab39f4b9ffa1fc95fc0bbf40101f44a6955 The OpenSSF Package Analysis project identified 'tdm-shared-core-library' @ 99.0.3 npm as malicious. It is considered malicious because: - The...

MAL-2025-46998 Malicious code in tdm-shared-core-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f40d5eac324a286d10c565745ab72ab39f4b9ffa1fc95fc0bbf40101f44a6955 The OpenSSF Package Analysis project identified 'tdm-shared-core-library' @ 99.0.3 npm as malicious. It is considered malicious because: - The...

Malicious code in jfrog-alfheim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81aec3e5e257dac330f6d3f73c310c476b4926e6cd0040f2ac70b7a4f45005aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42150 Malicious code in jfrog-alfheim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81aec3e5e257dac330f6d3f73c310c476b4926e6cd0040f2ac70b7a4f45005aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in file-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9d9ac2b90c17d04ff56afe81a886e99665eb55048e7cc7c9a3f0b1855db828 The OpenSSF Package Analysis project identified 'file-dependency' @ 7.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-45999 Malicious code in sfly-services (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da589d8876d458397b3e7aa677e83cb9f21a92526a613fa62808be5946105774 Any computer that has this package installed or running should be considered...

Malicious code in collabs-influencer-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 313990126cb820aa31d04033f63105e8a07118c14e0ec49cd4ce0c67c1f60c47 The OpenSSF Package Analysis project identified 'collabs-influencer-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in newrelic-infrastructure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc689df21770af17a368dc724b21526759afb6d21614e0f7eb0033ef0ce430ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-rdv-insertion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6a011f4c21be2958b339f3da564f192dce2329a2d29903a2b0f01933708d94a The OpenSSF Package Analysis project identified 'eslint-plugin-rdv-insertion' @ 7.99.99 npm as malicious. It is considered malicious because: -...

MAL-2025-42133 Malicious code in eslint-plugin-rdv-insertion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6a011f4c21be2958b339f3da564f192dce2329a2d29903a2b0f01933708d94a The OpenSSF Package Analysis project identified 'eslint-plugin-rdv-insertion' @ 7.99.99 npm as malicious. It is considered malicious because: -...

Malicious code in github_chatops_extensions (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6269b59c516350c690f7fdf09dff674c52173f38074e8ac6f7b012352851797b The OpenSSF Package Analysis project identified 'githubchatopsextensions' @ 0.5.2.96.g33cefed rubygems as malicious. It is considered malicious...