Malicious code in callgraphbff (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in ochot-odong (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5356 Malicious code in agoda.cronos.activities.client-side (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0928f5727876dc4dcdb9f1869badd5793565d97277f96836f85b5413f44bcaf9 Any computer that has this package installed or running should be considered...

MAL-2025-4918 Malicious code in ac-object (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c8e3af8316e9f831ecb0049a57731e32431e9c7ca54d47aa83341f5774ccd83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in skulldentist (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-677 Malicious code in old-celo-base (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d16d8623e169f195cbb3deeebd0e37b8e6ddd13cfdd5a9b2ece072f3e0170a1b Any computer that has this package installed or running should be considered...

MAL-2025-532 Malicious code in lyft-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 191527fd54bb2116b8405e7655ca0fa98138ea2f8f4463ca288460aeb3d1caf9 The OpenSSF Package Analysis project identified 'lyft-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-520 Malicious code in lyft-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d38f448299b8cf08b4e9a13e97a9c14c62534e926734f9f7b65fd051eb22509c The OpenSSF Package Analysis project identified 'lyft-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-483 Malicious code in iberia-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbeb23de83ef06752a7c78f785f0b4cde49252cd16b137dd3e3fec73e2714bfc The OpenSSF Package Analysis project identified 'iberia-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10807 Malicious code in seller-rn-mng-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92086f415cec1b766cd8be30c674b6841262d14cae307bfc7060691b93c93078 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9281 Malicious code in test-automation-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f06e180b42b483251e9be9757c11456faac61b034b2b3c0cb72e20162987c156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1561 Malicious code in rb-payment-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb4113e8b820d0f3ed35205bfc6b682ce6bb937db31002b79c44bb723908e18 The OpenSSF Package Analysis project identified 'rb-payment-wallet' @ 0.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1167 Malicious code in xo-page-test-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11d1c570ca1f162deccd278919172fec0695d65f640b2365daebdc2dfa0d998d The OpenSSF Package Analysis project identified 'xo-page-test-components' @ 99.2.9 npm as malicious. It is considered malicious because: - The...

MAL-2023-1103 Malicious code in @region-lib/helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f84da1cfecc0e380a493053daa5d6240c342559aefe6ff74ccb3ef6e66ac7d0 The OpenSSF Package Analysis project identified '@region-lib/helper' @ 2000.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1120 Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...