Malicious code in guppy-dev (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b56a4d108a100f12dd3aedb0e1f0f3b8007ecc181e366198a22242473696f219 The OpenSSF Package Analysis project identified 'guppy-dev' @ 2.0.0 n...

MAL-2025-6824 Malicious code in facebook-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0ca4dfebc7839330f25a231f2f87af41aef50ea715541751bef46a1709f045e The OpenSSF Package Analysis project identified 'facebook-for-woocommerce' @ 3.6.6 npm as malicious. It is considered malicious because: - The...

MAL-2025-6837 Malicious code in faulthandler (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @shadowmonarchx/eslint_plugin_react (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68a575ed67cd813fc81aec32ae29e2e8672e85158eebc9e3a07face9ed576247 Any computer that has this package installed or running should be considered...

Malicious code in caglass (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e455bdcd125bc7e808bd44aefba85c1ef5838aa36b61d5fd75f2c6f026bce1b4 Any computer that has this package installed or running should be considered...

Malicious code in jsmdc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d2c0aff7f35c88859f22a83734bb661c5d66f25262f8c09e97870b387cddbc2 Any computer that has this package installed or running should be considered...

Malicious code in mydummyproject-zyp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7385c16c060ed95f15f1eed55e51d69f17bc1768a7ed955da163b7e314b62df Any computer that has this package installed or running should be considered...

Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

Malicious code in pages-admin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-2561 Malicious code in chatbot-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af371ce3024a5ed217ff2baf8b2a9443cf92ae8a1993552e3679be6f83698a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spot-the-station-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb32a10195bed4025536ad80a8fc81f68b24c95dc8f8db05358097fcb07bc613 The OpenSSF Package Analysis project identified 'spot-the-station-app' @ 2.1.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-12084 Malicious code in @shahwarhello/l2geth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d5aced97b470cf82beae6ab385323996a424bcf3bb43f800076b4e3158e6d701 The OpenSSF Package Analysis project identified '@shahwarhello/l2geth' @ 0.5.11 npm as malicious. It is considered malicious because: - The...

MAL-2024-11878 Malicious code in spacexstats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3d5802346cd5966361f229a602839453998b6251e428ec6638141f6fcdb3c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11203 Malicious code in finn-pulse-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8556cda5df574e7c339a9e910f83692fefe384dd8c3c1107fafd270c8057a170 The OpenSSF Package Analysis project identified 'finn-pulse-init' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11186 Malicious code in cdp-agentkit-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d53da33893272680319756bf6d56dbd2de8b7d06bc19bd46c65f06c11336031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10805 Malicious code in seller-pure-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 924c57b004a67cf8549a22da58c4ad78093283c6dc0bf73ab25aee9aa082110f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10787 Malicious code in seatalk-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1ba364a75979c4daf8df3fca9ae125f39309f1e2aaaf2ee625eef7a3e9a1d30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10715 Malicious code in newbharatv1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d58cd04cb4c3ad9bf805ad16e20cc8373d056c1a8afe2ffe2f67925488786a95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10751 Malicious code in listing-uss-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bdefff07d9e9bd5fa8b0b524652775ca14bf5851937f5fa73f1e783996ad940 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in refocus-sgt-trust1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a58d6e895c9c66ecf3d14b36826200aba02fdf96987b6b7b619c6945dddbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...