MAL-2025-5030 Malicious code in cycle-a (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-677 Malicious code in old-celo-base (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d16d8623e169f195cbb3deeebd0e37b8e6ddd13cfdd5a9b2ece072f3e0170a1b Any computer that has this package installed or running should be considered...

MAL-2024-10241 Malicious code in youreallydontwantthispackage2131 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8bca93b1825c930118e85cc054305e6aef120080f8cc68233467eb6ee7b3ff1d Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

MAL-2023-1262 Malicious code in pages-workerjs-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 084fc58ae4c4ebf6fd1a7460a0d7e00057016e82e724191cfd78903391907100 The OpenSSF Package Analysis project identified 'pages-workerjs-app' @ 24.12.47 npm as malicious. It is considered malicious because: - The...