Malicious code in unity-ijrqu-fob0s-nebula-project (npm)

The package unity-ijrqu-fob0s-nebula-project was found to contain malicious code...

MAL-2025-37833 Malicious code in unity-2d-youxi-kaifa-jiaocheng (npm)

The package unity-2d-youxi-kaifa-jiaocheng was found to contain malicious code...

MAL-2025-37836 Malicious code in unity-aln22-ix8ry-fern-project (npm)

The package unity-aln22-ix8ry-fern-project was found to contain malicious code...

MAL-2025-17347 Malicious code in com.microsoft.spatialaudio.spatializer.unity (npm)

The package com.microsoft.spatialaudio.spatializer.unity was found to contain malicious code...

MAL-2025-37831 Malicious code in unity-24x1c-umms4-bison-project (npm)

The package unity-24x1c-umms4-bison-project was found to contain malicious code...

MAL-2025-17372 Malicious code in com.unity.xr.interactionsubsystems (npm)

The package com.unity.xr.interactionsubsystems was found to contain malicious code...

MAL-2025-17361 Malicious code in com.unity.render-pipelines.core (npm)

The package com.unity.render-pipelines.core was found to contain malicious code...

MAL-2025-17375 Malicious code in com.unity.xrtools.module-loader (npm)

The package com.unity.xrtools.module-loader was found to contain malicious code...

MAL-2025-28993 Malicious code in pearl-vnjx2-eqrbi-unity-project (npm)

The package pearl-vnjx2-eqrbi-unity-project was found to contain malicious code...

MAL-2025-37846 Malicious code in unity-ywvl3-quymi-lotus-project (npm)

The package unity-ywvl3-quymi-lotus-project was found to contain malicious code...

MAL-2025-17364 Malicious code in com.unity.standardevents (npm)

The package com.unity.standardevents was found to contain malicious code...

Malicious code in com.unity.netcode.gameobjects (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 131cc29f9c925613b77fd6e6c06f43433bdc5a9511461af56fd519562408c3c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4316 Malicious code in com.unity.build-report-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0616202469978d5a678e2f752b7f1d3d5c0b99ed091554d11c9f66ca32bca38d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.2d.common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75a37bfaf17aed750692186fe017783457f38ab50f15f7a49ddb94033cb27443 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.cloud.gltfast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e350e8cdd404b4b5f53387437ed02152319a19e625bd4ce4c7c178848bd72e60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.test-runner-manual-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85698be2138d279587657502f67090097d4cbbeb4b05a492c63e318fe69f4560 The OpenSSF Package Analysis project identified 'com.unity.test-runner-manual-tests' @ 2.0.0 npm as malicious. It is considered malicious becaus...

Malicious code in com.unity.xrtools.spatial-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis efa5d123e10b0da3ed7e7898101f41654aa13a572def7acb40b838e0ef88e74b The OpenSSF Package Analysis project identified 'com.unity.xrtools.spatial-hash' @ 2.0.0 npm as malicious. It is considered malicious because: -...

Malicious Package

Overview com.unity.selection-groups is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

Malicious code in com.unity.modules.physics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c219e6d9f8356b84f53009fdc6a767fed3e5e1283c5e2d2246435da92e8f0bb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.modules.imageconversion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58c72ec7d0fefbecafd157cd2c9dcc153e4f7c0cd107bc6f4e27cb082b00f630 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...