MAL-2025-47291 Malicious code in @yoobic/design-system (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3dc662cb25b7ebe3c1d58e79387906ea93fed4e7034c6e415b1befd1971874a Any computer that has this package installed or running should be considered fully compromised. All...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...

Malicious code in design-system-components-angular-workspace (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41967 Malicious code in design-system-components-angular-workspace (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in bps-react-design-system (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-41372 Malicious code in bps-react-design-system (npm)

The package communicates with a domain associated with malicious activity...

Security Bulletin: Carbon design system packages

Summary Various packages are vulnerable to multiples CVEs and can be resolved by updating to [email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected], @carbon/[email protected]....

Malicious code in yarn-design-system (npm)

The package yarn-design-system was found to contain malicious code...

Malicious code in yarn-design-system-icons (npm)

The package yarn-design-system-icons was found to contain malicious code...

Malicious code in snap-design-system (npm)

The package snap-design-system was found to contain malicious code...

Malicious code in yarn-design-system-icons-ce-c (npm)

The package yarn-design-system-icons-ce-c was found to contain malicious code...

Malicious code in yarn-design-system-rc-slider (npm)

The package yarn-design-system-rc-slider was found to contain malicious code...

Malicious code in yarn-design-system-jsdoc-template (npm)

The package yarn-design-system-jsdoc-template was found to contain malicious code...

Malicious code in @snapon/design-system-react (npm)

The package @snapon/design-system-react was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in yarn-design-system-ag-grid (npm)

The package yarn-design-system-ag-grid was found to contain malicious code...

Malicious code in yarn-design-system-react-components (npm)

The package yarn-design-system-react-components was found to contain malicious code...

Malicious code in vue-design-system (npm)

The package vue-design-system was found to contain malicious code...

Malicious code in yarn-design-system-swiper (npm)

The package yarn-design-system-swiper was found to contain malicious code...

Malicious code in yarn-design-system-react-components-ce-c (npm)

The package yarn-design-system-react-components-ce-c was found to contain malicious code...

MAL-2025-40338 Malicious code in yarn-design-system-icons (npm)

The package yarn-design-system-icons was found to contain malicious code...