MAL-2025-2451 Malicious code in idme-component-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1194c5ee341dd44fccad1c3e2a9d698dd452b384ab16498ae5b59a40f00787a7 The OpenSSF Package Analysis project identified 'idme-component-utilities' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-2152 Malicious code in certifications (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7d51c9defecdd382c5048eb6f92b32558355b8457b2b5cd63f3d86e12e8ed35b Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...

MAL-2025-2151 Malicious code in dexter-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af68f212ffdb2522ba261549728dc70fe8cb18c52beaed06290818706c688606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2155 Malicious code in sdxcode1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e86442bd4bd6e2d95d5da4c3cf82c1961b38b57f4e51b8654d2d3398990dece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2149 Malicious code in nmp-frontend-libraries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9320142027c800d4b8427512d6c6c219bc910b204b892be28af3a3849302e649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2148 Malicious code in d4rk0nm3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fcd44fdf07755c2f5060eee6df68679af14c7bd6185b52853041856db638c7da The OpenSSF Package Analysis project identified 'd4rk0nm3' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...

Malicious code in connector-colaborator1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a80cb3d91a164687c80e6c2353408b9a523ab14d72481ceda8aeb7e875b339c The OpenSSF Package Analysis project identified 'connector-colaborator1' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-2070 Malicious code in connector-colaborator1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a80cb3d91a164687c80e6c2353408b9a523ab14d72481ceda8aeb7e875b339c The OpenSSF Package Analysis project identified 'connector-colaborator1' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in connector-colaborator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e6b36fb73f95f45f84f970f686c6e99ac696443d4011ed8949a09ba012e27336 The OpenSSF Package Analysis project identified 'connector-colaborator' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-2067 Malicious code in product-custom-grid-columns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 620dece457b625966cbf804fa1e8bcd8b54fb2b961020453940961af4569f10d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2065 Malicious code in qaboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ac2bfcab360f7de45c230b1af8580c51697bb734b65eb7d85386f00a2fe83ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2061 Malicious code in atpw-reactive-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 087c073ee5ea5ea80f9935623ee80f8efd14ca034a3f7816298c966e5ff939cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2060 Malicious code in subscriptionmgmtserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c14d2b0dcadceb26623b66d1383bf38d46b5b9cccee3619f1cfe8cef942f4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2018 Malicious code in calculated_members_message (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5529e99d26fab951551b850892343db8270230c71da1a8091e2bca79559e37f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2014 Malicious code in configs-web-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e2873a2ee1e0748ca75f7e661e6961df7a4522dae8e7e658c47cfbab20eff7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1678 Malicious code in @sonahri51/orientation-change-end (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4e5ffc2c48c12f6b36620be282c6ed94826d434430e8412d70a220d4719b366 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1671 Malicious code in mkdocs-material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e8872e6e833db36b43b1b63f9aa1324d6d0f193b0a0a1e352bf104215f00d4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1660 Malicious code in pinterest-api-quickstart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de6afa61b510fce124f3acc43d8e5400a0bf0566b85284bf19cf7fdea19934c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1658 Malicious code in skyflowelements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42e1dc8575c7a9a2643fe2f656ff55984aa3635881ed697991cf2bbf6479e2e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1654 Malicious code in nanovest-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d16e1056fd5093195f09f1074b4a1e5832286639ad292adae94fb8fbb005eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...