MAL-2025-48555 Malicious code in user_oidc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e28e6e5435f54199a3dca6186e1ad2d2846226bcf0a6792ff09d40b6215ed7af The OpenSSF Package Analysis project identified 'useroidc' @ 8.0.2 np...

MAL-2025-48753 Malicious code in puppeteer-jest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b344f7f7f48bc61a2216808c72e518be94a33da9dac41acba0de196d228384 Any computer that has this package installed or running should be considered...

MAL-2025-48621 Malicious code in cypress-typescript (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b097d06051e8ef675fa3ea9aa9b85954881d62d81b5e6e4301716fffd4807c9 Any computer that has this package installed or running should be considered...

MAL-2025-48744 Malicious code in node-js-playwright-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1641207c93032c94f176032bea4a9fc81eecc63bf9340ebc483585378afdb939 Any computer that has this package installed or running should be considered...

Malicious code in node-js-playwright-browserstack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1641207c93032c94f176032bea4a9fc81eecc63bf9340ebc483585378afdb939 Any computer that has this package installed or running should be considered...

Malicious code in test-all2 (npm)

The package communicates with a domain associated with malicious activity...

Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

Motex LANSCOPE Endpoint Manager contains an improper verification of source of a communication channel vulnerability allowing an attacker to execute arbitrary code by sending specially crafted packets...

MAL-2025-48556 Malicious code in qwant-search-extension (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b62fa18764e78b78ad37bea56c978df2cba57aa015e3b3eb13b0fc74e05678b1 The OpenSSF Package Analysis project identified...

Malicious code in shiprocket-invoice-export (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48682 Malicious code in flow-docscanner-db (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48737 Malicious code in local_edwiserform (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f09b291592b83778f66787625c78aa9cf28c760a5b29afd5eb45885b8aef0149 Any computer that has this package installed or running should be considered...

MAL-2025-48752 Malicious code in peloton-creative-assets (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 27599b248968e9e2ea7e7167ee3199163e611123d5a34c382d7041a04ade757e The OpenSSF Package Analysis project identified...

MAL-2025-48528 Malicious code in canary-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74897d1cb26c40f57347ed1208575b63c7c1feb3a92ea2bef8bc84db2700bd8a The OpenSSF Package Analysis project identified 'canary-ng' @ 1337.1.0 npm as malicious. It is considered malicious because: - The package...

Lanscope Endpoint Manager (On-Premises) vulnerable to improper verification of source of a communication channel

Overview Lanscope Endpoint Manager On-Premises provided by MOTEX Inc. contains the following vulnerability. Improper verification of source of a communication channel CWE-940 - CVE-2025-61932 MOTEX Inc. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and...

FreeBSD : Mozilla -- Memory disclosure (f7047dfc-ad02-11f0-b2aa-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f7047dfc-ad02-11f0-b2aa-b42e991fc52e advisory. [email protected] reports: A compromised web process using malicious IPC messages could have caused...

Malicious code in simmons (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48506 Malicious code in simmons (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48504 Malicious code in rootsid (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in circleci-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d54b71e0248eb8babb0f78827eff5338450108a9cb2814de5573278a5eac86c Any computer that has this package installed or running should be considered...

Malicious code in src_module_index_ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bf9366083306734c374979ba195511ae8d793d9e0cb915f2f7374ee7450724c Any computer that has this package installed or running should be considered...