Malicious code in apple-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a28424c3eb52b6465dc90e9a4baeb05ea21a773f02f424c581a09086337af Any computer that has this package installed or running should be considered...

MAL-2025-1019 Malicious code in apple-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e28a28424c3eb52b6465dc90e9a4baeb05ea21a773f02f424c581a09086337af Any computer that has this package installed or running should be considered...

MAL-2025-1001 Malicious code in utils-hex (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in utils-pencaws (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1002 Malicious code in utils-pencaws (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in utils-eth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1000 Malicious code in utils-eth (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13

CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13. A patched version of the package is available...

Malicious code in common-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461213ab0829aa9518db4d8793b4a1fdfd4b3bd6971f9bbd126d558e4f96b953 Any computer that has this package installed or running should be considered...

MAL-2025-646 Malicious code in common-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461213ab0829aa9518db4d8793b4a1fdfd4b3bd6971f9bbd126d558e4f96b953 Any computer that has this package installed or running should be considered...

Malicious code in telegramclient-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2807323f53c2562dc15aa9f4a559ede7c0e9dee713d30a637a4cf8f2c13f2640 Any computer that has this package installed or...

MAL-2025-625 Malicious code in grammyjs-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45f0349da339aac302d4c3bf992403e9bd539caa80f29576e448ccf3fb4af016 Any computer that has this package installed or...

MAL-2025-624 Malicious code in grammy-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722622ea790d1aa9a24e9418f5f3480a09e5501b039fa8256d60bba00291e894 Any computer that has this package installed or...

Malicious code in grammyjs-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45f0349da339aac302d4c3bf992403e9bd539caa80f29576e448ccf3fb4af016 Any computer that has this package installed or...

MAL-2025-630 Malicious code in telegramclient-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2807323f53c2562dc15aa9f4a559ede7c0e9dee713d30a637a4cf8f2c13f2640 Any computer that has this package installed or...

Advisory ROSA-SA-2025-2609

software: shadow-utils 4.10 WASP: ROSA-CHROME packageevrstring: shadow-utils-4.10-7 CVE-ID: CVE-2023-4641 BDU-ID: 2024-02776 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the shadow-utils package involves requesting a password twice and failing to clear the memory buffer. Exploitation of the...

Malicious code in upm-ci-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1beda914230d5e12471232662657b88c0d884ead109d0a6a01bfe5760051ce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-543 Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f45dd8de7c9dfbf4be3b1eb3b9ba6589946428e21d51e9d4da84804e129b9b5 The OpenSSF Package Analysis project identified 'linkedin-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...