MAL-2025-3593 Malicious code in client-utility-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3ea30b384f30ddf174344cda1da28874f1f377efed1f312b34ba56b7bedd7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3575 Malicious code in adobe-acrobat-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d7f8480bfb87e856460e7dedfcbc5f53a5bce7d4c34225bb231dc41507678d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aegis-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 012d98d433c475ff3012368e49e74b54c587fd81749e936cc898ba80a4d8d868 The OpenSSF Package Analysis project identified 'aegis-contracts' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3574 Malicious code in aegis-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 012d98d433c475ff3012368e49e74b54c587fd81749e936cc898ba80a4d8d868 The OpenSSF Package Analysis project identified 'aegis-contracts' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3573 Malicious code in ui-platform-business-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f863d731ba9d0cbfada890f27b8acb5ae30e8265c71236b451812cbf863be3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3564 Malicious code in @di-sdk/quickselect-wasm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb4f93b792159c059a742b5ea3d59a8038b8e1be1103e430086184a2f3ca3090 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in freo-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8745e789b7b101fb7ede2f6f26567a39b6ec9522c2f6cad7f182098661442ced The OpenSSF Package Analysis project identified 'freo-design-system' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4172 Malicious code in digital-retail-falabella-unified-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147f64482f11e5d69326b68fb5d8644d9df7c3073481cdac8e2b81176acfe6d3 The OpenSSF Package Analysis project identified 'digital-retail-falabella-unified-login' @ 1.0.0 npm as malicious. It is considered malicious...

MAL-2025-3296 Malicious code in @template-builder/iframe-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d449b73ecd5ceb50edae265044e9523e1608eafa7389e2e46f139ea57a4e37aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3510 Malicious code in rose-bn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b255ebbe2f749770901182d7be69641b1f7e94bacd94fff31794262c33d998af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bvr-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ed2a0f9c584ecfcffc1c76619a1637559d1d8771f78e1d3655f819f7fff67962 The OpenSSF Package Analysis project identified 'bvr-api' @ 0.3.12 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-3295 Malicious code in bvr-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ed2a0f9c584ecfcffc1c76619a1637559d1d8771f78e1d3655f819f7fff67962 The OpenSSF Package Analysis project identified 'bvr-api' @ 0.3.12 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-3279 Malicious code in sprocket-webapp-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f5d57baf1c9d4921b97830956bc52be3915cbc7653c64569768d18c5583c845a The OpenSSF Package Analysis project identified 'sprocket-webapp-poc' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

Malicious code in arubaiothubdemoapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 876ff25e0242422681fb71c6ba92f36b79e0584103fae49a5bffdd959497485b The OpenSSF Package Analysis project identified 'arubaiothubdemoapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3268 Malicious code in arubaiothubdemoapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 876ff25e0242422681fb71c6ba92f36b79e0584103fae49a5bffdd959497485b The OpenSSF Package Analysis project identified 'arubaiothubdemoapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3222 Malicious code in web-sim-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d3b8a674300adbbebf266b874c5c0505e514bace39bd005a46f18525cd3eb16 The OpenSSF Package Analysis project identified 'web-sim-control' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3174 Malicious code in typesense-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 490e72092d3e2b725ff92c6b8bb87fb850509bdd1abbead8e8cb9427a4d92bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3176 Malicious code in @n37scancp/highlight.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 944af106fc0b2a334ed1ab4fb6784a0b2cc01e5f795b1de3449b8deaf6560b50 The OpenSSF Package Analysis project identified '@n37scancp/highlight.js' @ 11.11.12 npm as malicious. It is considered malicious because: - The...

Malicious code in @hyattcorp/design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58f37a41edefebdd744efb01380e035aad567082e7fa96361effc44e4e9f1b49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angular2-tesla-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 750e5a71820465f7842a06b6cbaa034cd7f4bf78fb9f20b44e5785088ae8b61a The OpenSSF Package Analysis project identified 'angular2-tesla-common' @ 99.99.103 npm as malicious. It is considered malicious because: - The...