MAL-2025-47394 Malicious code in capacitor-notificationhandler (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f48b8279ed29432862fc6a0e1baa55481494de62d45c143694c11b696b235e Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-47395 Malicious code in capacitor-plugin-healthapp (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed67ecd3a89635aa7072f0b0399ad7c1fa0f7805c8bbe59b9a775654e5acdab Any computer that has this package installed or running should be considered fully compromised. All...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

MAL-2025-6883 Malicious code in @capacitor-bmo/biometric (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31e5db1d24cb68dbd291a2dc917c13515b048d4ae58196d9a921d4fea7382316 The OpenSSF Package Analysis project identified '@capacitor-bmo/biometric' @ 9999.0.1 npm as malicious. It is considered malicious because: - Th...

Malicious code in @capacitor-bmo/biometric (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31e5db1d24cb68dbd291a2dc917c13515b048d4ae58196d9a921d4fea7382316 The OpenSSF Package Analysis project identified '@capacitor-bmo/biometric' @ 9999.0.1 npm as malicious. It is considered malicious because: - Th...

Malicious code in @capacitor-bmo/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73144f96ecbe009cff465503e7a7c8d70408d0a85196d3b8faefbd6809a731e8 The OpenSSF Package Analysis project identified '@capacitor-bmo/common' @ 99.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-6884 Malicious code in @capacitor-bmo/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73144f96ecbe009cff465503e7a7c8d70408d0a85196d3b8faefbd6809a731e8 The OpenSSF Package Analysis project identified '@capacitor-bmo/common' @ 99.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-6878 Malicious code in biocatch-capacitor-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b0a760092b9cf8b6d14cdcfd198b9f2155dd4de76697941bf5ed7bc728bf38f The OpenSSF Package Analysis project identified 'biocatch-capacitor-plugin' @ 9999.0.1 npm as malicious. It is considered malicious because: - T...

Malicious code in biocatch-capacitor-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b0a760092b9cf8b6d14cdcfd198b9f2155dd4de76697941bf5ed7bc728bf38f The OpenSSF Package Analysis project identified 'biocatch-capacitor-plugin' @ 9999.0.1 npm as malicious. It is considered malicious because: - T...

Malicious code in phonepe-payment-capacitor-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c02a4bb7c5999768baf3318427f8aaffad151f7838f8bfdfee9ad952a24db492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2831 Malicious code in @uniqa-extern/capacitor-plugin-unblu (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-2830 Malicious code in @uniqa-extern/capacitor-plugin-kofax (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in phonepe-payment-capacitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d01542a7b9d2f9074bacbba74137fca1ea6f0a5e3a4539037d83dc529ff4d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12079 Malicious code in phonepe-payment-capacitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d01542a7b9d2f9074bacbba74137fca1ea6f0a5e3a4539037d83dc529ff4d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

net: microchip: vcap: Fix use-after-free error in kunit test

...

MAL-2024-9074 Malicious code in kupo-capacitor-statusbar-safe-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a521062da847cc39c10b9c614e06ebe609aa0aa6285be6e55fb1a5e2bf84ee7 The OpenSSF Package Analysis project identified 'kupo-capacitor-statusbar-safe-area' @ 9.0.0 npm as malicious. It is considered malicious becaus...

Malicious code in kupo-capacitor-statusbar-safe-area (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a521062da847cc39c10b9c614e06ebe609aa0aa6285be6e55fb1a5e2bf84ee7 The OpenSSF Package Analysis project identified 'kupo-capacitor-statusbar-safe-area' @ 9.0.0 npm as malicious. It is considered malicious becaus...