Malicious code in autobahn-testsuite-docker (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in metereorpreter-test2-dns (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47858 Malicious code in pega-package-dependency (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @discord-external/activity-iframe-sdk (npm)

The package @discord-external/activity-iframe-sdk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c4df7af2ceae80fdc052edf95094a378287786ae21cfec9a6104a2af2b1d9b98 This package installs a dependency hosted on a cust...

MAL-2025-47574 Malicious code in @discord-external/activity-iframe-sdk (npm)

The package @discord-external/activity-iframe-sdk was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security c4df7af2ceae80fdc052edf95094a378287786ae21cfec9a6104a2af2b1d9b98 This package installs a dependency hosted on a cust...

CVE-2025-56146

Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity...

Malicious code in vault-hux-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0e642811b789c4f724d3169822154751db4b210ded1f45f3eda9396725cb30e The OpenSSF Package Analysis project identified 'vault-hux-common' @ 9000.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-47515 Malicious code in vault-api-redux-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in vault-api-redux-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15cac4b456079ac507ddcba10b8fb9b258c916f8fcc7d22565567810a43d6a63 The OpenSSF Package Analysis project identified 'vault-api-redux-client' @ 9000.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in pc-analytics-promotion-creation-client (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4d66ab8f0d38376b6ec23e7703446b3c1d3849127ae2eb86050e41db25563bc Any computer that has this package installed or running should be considered...

Malicious code in spayee-micro-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16d410f61fc4213f1ca0f3f16618828e186e9c5c6b130545bdb49eb4c0d68ec5 Any computer that has this package installed or running should be considered...

Malicious code in area_cliente_front (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf45b985429114d0e3994309f09b39631d0b3c87309f6a06d75ccf0bb3f9e00a Any computer that has this package installed or running should be considered...

MAL-2025-47575 Malicious code in adco-warp-sdk (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47586 Malicious code in gd-flag-content (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in gd-flag-content (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-47593 Malicious code in package-x (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c97a3da4527d6f380ebdc150b7825a38cd9e5f84f7c854b9eabbef547c69c807 Any computer that has this package installed or running should be considered...

MAL-2025-47585 Malicious code in funny-font-wow (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 476f2be479b43f09e5f3955a6404c84db43a4b9a81eee04f4916668d38f4bbfa Any computer that has this package installed or running should be considered...

Malicious code in dex-creator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a45a7bed266fa05cf91945ed835fdf225abff89dd8dcde90c90dc769b04e15e3 The OpenSSF Package Analysis project identified 'dex-creator' @ 2.0.0...

Malicious code in @bgrc/kyc-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 491ac58a40b45ff06a00ad44a33a15bd95394c8fde64034d150fb31433a18380 The OpenSSF Package Analysis project identified '@bgrc/kyc-theme' @ 9000.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in across-indexer-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fef241ea15f212acce31cd8bcc9d561a7f8a55c8367d778cca91c189d8a3a7 The OpenSSF Package Analysis project identified 'across-indexer-monorepo' @ 7.1.1 npm as malicious. It is considered malicious because: - The...