Malicious code in @matjp/dvi-decode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 285904d13f5d698c3c33461fe969265ca73c3041db80eabe5637c1ebd3f3ca9b The package @matjp/dvi-decode was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192368 Malicious code in paysera-checkout-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb6d9d88b5364464913578a099da2b1259bed01c770b78797f9c7f97dd9ba67 The package paysera-checkout-modal was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-48622 Malicious code in data-gsyb11 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in payment-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 92762e9377e6c36f55c0751c31cbeed16a6095218e689bdafd2a4fd074382460 The OpenSSF Package Analysis project identified 'payment-banner' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in aws-toolkit-vscode (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5293 Malicious code in retaillocationserv-paypal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0409d54039e50835f5e9986281184dc84f53f8c20c6a838505fcd8097c538feb The OpenSSF Package Analysis project identified...

MAL-2023-1128 Malicious code in calfirebof.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e25233bbab089a468ee98d824050f903357440485e2fce9fb4291afdec427485 The OpenSSF Package Analysis project identified 'calfirebof.web' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Kubernetes: Broken Domain Link Takeover from kubernetes.io docs

Report Submission Form Summary: Kubernetes docs have Spanish translation available. One of the pages of the Portuguese doc has an external reference to a website . The website is not registered and can be purchased and used to host malicious content. Kubernetes Version: NA Component Version: NA...