MAL-2025-41914 Malicious code in @ibm-integration/flow-canvas (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41952 Malicious code in cameraroll (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in cameraroll (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41946 Malicious code in batchedbridge (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41935 Malicious code in accumulateinfo (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @callcenter-frontend/shared-types (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f78119137abb744cf51b995b836463c88b03fb249997685f0e4a2feb7ef621e The OpenSSF Package Analysis project identified...

Malicious code in @callcenter-frontend/api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 924eeec3ead0762c18ae254572edc5e76a3a27d3003bdea3c80eb6902fccf7c8 The OpenSSF Package Analysis project identified...

Malicious code in @callcenter-frontend/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4016a8ba643f5006745e20e9ffdf0834e7866393f01cb525cd3bfafc8131218 The OpenSSF Package Analysis project identified...

Malicious code in @callcenter-frontend/helpers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf97c6a167662f11bb874f05f30d15f1666631f719cbfee2485d3df20dbd569f The OpenSSF Package Analysis project identified...

Malicious code in @callcenter-frontend/services (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f985946c9433e8dec885ea60292e121e23ac3d9bbfe2f1cae80882b85ce1c29e The OpenSSF Package Analysis project identified...

Malicious code in testingfor123 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in tested123 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-42098 Malicious code in tested123 (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-42028 Malicious code in mpesa-backoffice-ekyc-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1d40690b03ef978ac9c358228d4e0372e07e448e4e8d894ab44d49e70d23bac Any computer that has this package installed or running should be considered...

MAL-2025-41818 Malicious code in azure-service-bus-emulator-node-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 871b655dee4c193ddb7e1b7be9e6a50920aa93049ffc2e663d74a7a5cc79ebff The OpenSSF Package Analysis project identified 'azure-service-bus-emulator-node-sample' @ 10.0.1 npm as malicious. It is considered malicious...

Malicious code in teshf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f642b49ede39ace29404ba39116e182c46ab9f2d41475cfeb10acae870caa89 The OpenSSF Package Analysis project identified 'teshf' @ 1339.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41813 Malicious code in react-media-template-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2fff48804ddfb5297954a2040eb8f90fd5ca36c31568a46d56d860ecf47148 The OpenSSF Package Analysis project identified 'react-media-template-ts' @ 10.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in editor-script-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f28dd5b9539646b395ebc2f66ec29862ccab627cf31e631994ef0ac494ba70 The OpenSSF Package Analysis project identified 'editor-script-box' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41814 Malicious code in typescript-api-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 398036095e479d925d07bcf55655437c9689808b7e019efbbfc071fcd4c459ac The OpenSSF Package Analysis project identified 'typescript-api-project' @ 10.0.1 npm as malicious. It is considered malicious because: - The...

Can Your Security Stack See ChatGPT? Why Network Visibility Matters

Generative AI platforms like ChatGPT, Gemini, Copilot, and Claude are increasingly common in organizations. While these solutions improve efficiency across tasks, they also present new data leak prevention for generative AI challenges. Sensitive information may be shared through chat prompts, fil...