Malicious code in arena-plm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f794e10373e988ac142e6dcebe8943efb8a623a7c9db9bee70ce592ef1e5746 Any computer that has this package installed or running should be considered...

MAL-2025-3611 Malicious code in arena-plm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f794e10373e988ac142e6dcebe8943efb8a623a7c9db9bee70ce592ef1e5746 Any computer that has this package installed or running should be considered...

MAL-2025-3606 Malicious code in adobe-commerce-magento (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6d37a2366d35f3960bd44382c3af4b61fa4ef998f6983dc7cd8bbe7dab3f78 Any computer that has this package installed or running should be considered...

Malicious code in aspose (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc6b6ee0294def0dac75dde8c136ed50e9a8e33324beaea4ab4a595a2e8f5171 Any computer that has this package installed or running should be considered...

MAL-2025-3608 Malicious code in amazon-seller-central (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c024eede57523427c4d17065ff707dcc6b11ff31346b6be86a4103202e377ca1 Any computer that has this package installed or running should be considered...

MAL-2025-3607 Malicious code in adp-workforce-now (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e4444262a0b552b47dba55c3ae16e66e9a1f3030328828f03021f255491b31f Any computer that has this package installed or running should be considered...

Malicious code in @igain/react-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92a7ea271ab926399063ffd4583f6b66fab6f3350920ca611701719de8f9356e Any computer that has this package installed or running should be considered...

Malicious code in @gfgtech/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84be24a70b7b194bd9b506eb47c9e8b14d609c4dacff0fe05c46440b18ebcc58 Any computer that has this package installed or running should be considered...

MAL-2025-3662 Malicious code in @gfgtech/ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84be24a70b7b194bd9b506eb47c9e8b14d609c4dacff0fe05c46440b18ebcc58 Any computer that has this package installed or running should be considered...

Device Status Query Detected (Low)

A status query has been sent to the device, which might indicate a reconnaissance activity. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503182...

Device Status Modification Detected (Low)

Changes in the controller state can stop operations altogether or start an operation that should not have been started. These operations can be used by an attacker to disrupt normal operation, cause production losses, or create safety concerns. This plugin only works with Tenable.ot. Please visit...

Malicious code in font-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404db1db5b86b6ce6ed40f2169b12625d010c431f4610548c55dc053f5d43d69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3714 Malicious code in crisp-import-conversations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695e694069b00b1d669921e34a38537e57d625a52cebab80f5ae8af1221b8377 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-platform-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e52fc989383c2ba9b074173be333530aa86b44f1fa38e4a7b156ab1bc4fc6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in component-modernizr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d129d7d7e1054353b2ec57d812f644c8d4fbcbc5ad054685eff845776516d1ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3587 Malicious code in swap-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc32db990bb425f3c32c2f312da5d2e3315f210e4aa1cc342f3df5c3827f6fe5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3579 Malicious code in fiddlesticks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec30bd6c3d5aa70760612fa335f9e4a9cf16de77eabb7dc0dc80cdcd61bc93bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3577 Malicious code in bffhfuruhejfhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298612b0f8a60cff6f0e77495a9c7fbac0f7b5ebd47ed47eccd75917a0196972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sxg-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b828cf00dda5e1da028ac7d8fa869413fb2e4b7592b0ae416d651ae839ca2704 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bffhfuruhejfhdj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 298612b0f8a60cff6f0e77495a9c7fbac0f7b5ebd47ed47eccd75917a0196972 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...