12998 matches found
MAL-2025-6712 Malicious code in cycalculator-ye51 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in undeface-test-5 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in zano_ui (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amdocs-auth-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d16664451db45f3a8b8da108a2b38785d0a7471480df169c57b38bccde640f7 Package name mimics an Amdocs internal package dependency-confusion lure...
MAL-2025-6675 Malicious code in undeface (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa6e61be1ff207a63e7d860121269781909d89daf344c1af7875918ac2d0fa22 The OpenSSF Package Analysis project identified 'undeface' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in internal-random (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amdocs-core-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e196068c171b8528ec4f1f0db852ef32a7b530ecce14d79696a21c4f685c2c6 The package declares a preinstall hook that runs index.js on npm install...
Malicious code in playwright-config-pdffiller (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6671 Malicious code in @usaa-grp-payments-web-experience/bk-acknowledge-module (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b56c4b39f3ee1932940e85cef9f0071fc46b948628c13f5588bd484de40ab42d The OpenSSF Package Analysis project identified '@usaa-grp-payments-web-experience/bk-acknowledge-module' @ 2.9.11 npm as malicious. It is...
Malicious code in eslint-config-pdffiller-typescript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd433611287b0e5010c855eaeac600cc58e87febefac7a8fdcb27568a25d29f2 The OpenSSF Package Analysis project identified 'eslint-config-pdffiller-typescript' @ 999.0.0 npm as malicious. It is considered malicious...
Malicious code in azuresdkpackagelist (npm)
The package communicates with a domain associated with malicious activity...
Pearcleaner 安全漏洞
Pearcleaner is a mac application cleaner tool by the individual developer Alin Lupascu. A security vulnerability exists in Pearcleaner versions 4.4.0 through 4.5.1, which stems from the XPC service exposing the Execute Arbitrary Command method, which could lead to elevation of privilege...
Malicious code in nubank-www-latam-commons (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ef98f115341b4b410449098489bee4471969a706dfe619a9d7704d26fa5a1f The OpenSSF Package Analysis project identified...
Malicious code in subchart (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6682 Malicious code in epic-games-nav-share (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5c0876d33c9155274a0eaba4f29d9351f9cfa32ddf6363ae74258d56185de63 Any computer that has this package installed or running should be considered...
Malicious code in sentry-core (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in weavejs-backend (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6762 Malicious code in spendesk (npm)
The package communicates with a domain associated with malicious activity...