MAL-2025-2341 Malicious code in @contraktor-tech/poc_confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fb8ec2fd9c3fd1eb30ca17367b62f932aa239c8b9209269913e9c88ea105536 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2340 Malicious code in notification-center-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3608296b1021343f3245e75793f59483ee9c78f0aa41ca662756286d02d348a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cfa-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aac7ddc598f480a5c87bd28d65a6fc762b5c9ce46b72934eabe3760b49f11a36 The OpenSSF Package Analysis project identified 'cfa-react-components' @ 2.8.8 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-2445 Malicious code in malwaretesting1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfabd3ff2ac6ca412b085988e3c2afdc4d44178dba2cfa134d851c159ccb7f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in malwaretesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08fe9939d1c2c8ae0ac8bf48c1a2f4e5fc02623d8012c4c6bbbb308f4d6f4200 The OpenSSF Package Analysis project identified 'malwaretesting' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in cb4good (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16e1ebf21c15491517654d93507f4ac7ca8aa96e47403f10fd753ef7bcbca95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2232 Malicious code in cb4good (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16e1ebf21c15491517654d93507f4ac7ca8aa96e47403f10fd753ef7bcbca95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2231 Malicious code in @partner-tech/pax-illustrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59fd97ac6b88180973bc6765a95cc0730d5de2879c68c3d7d29dda4531b7fbec The OpenSSF Package Analysis project identified '@partner-tech/pax-illustrations' @ 99.99.106 npm as malicious. It is considered malicious...

MAL-2025-2226 Malicious code in atlas-user-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7efee27a6c041d66384de635910c04fe43fa2c193ad0a47efb69acb84fb16ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2224 Malicious code in atlas-websocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8650c05b42abfbb5a69f65d884b445fcd038d3c56563d3ce5341af221bf80db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2228 Malicious code in prblingd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7886e2696ffc6e35d7a80ad30ee51258e49c741e17d02b5d6c83d370fe5165a8 The OpenSSF Package Analysis project identified 'prblingd' @ 1.0.3 npm as malicious. It is considered malicious because: - The package executes...

MAL-2025-2223 Malicious code in patternfly-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057836fcde782f283efd1e52688d31d8375cd7d963b136908d1457ea24e64193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2211 Malicious code in realityspiral (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 750c382ff53ef751feeedfaf955cf5b12ff8fd6f91a1087c0616eddbab203913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2219 Malicious code in sendbird-chat-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed64b926ca67eeb78b98e8ba6fdaec0bc57f79fc486f9d178d69da4b0b92f7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2205 Malicious code in wrap.scrt.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb46cf4f945ffd141ee169ecf371a571f2692a3287c77efe8a9ea92c4811acb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2220 Malicious code in testsdvsdfsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92ea47bd0fd5d9fb7ce2355ae009d0d93f6136d1bdfb44814286c1a434683492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2222 Malicious code in userrelationship-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522db266cc5ee9a741f9a3fde1a0f9e69cd84419296d3011e1e89833d068d06c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tommyboytesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264f52ff2f35da38715922f14fbd4a8a2fb8ea31fd56fdbffd735b410b7bfc2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2156 Malicious code in tommyboytesting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264f52ff2f35da38715922f14fbd4a8a2fb8ea31fd56fdbffd735b410b7bfc2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-invoicer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ce45f4356717c34ab095570b175a0fa8bb5c8b2929e42e73d1997dc8fdec3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...