Malicious code in ecosystem-vortex-vda657-project (npm)

The package ecosystem-vortex-vda657-project was found to contain malicious code...

Malicious code in zenith-ecosystem-efh656-project (npm)

The package zenith-ecosystem-efh656-project was found to contain malicious code...

Malicious code in hill-ecosystem-kdd949-project (npm)

The package hill-ecosystem-kdd949-project was found to contain malicious code...

Malicious code in ecosystem-tornado-vgj614-project (npm)

The package ecosystem-tornado-vgj614-project was found to contain malicious code...

Malicious code in hollow-ecosystem-rth157-project (npm)

The package hollow-ecosystem-rth157-project was found to contain malicious code...

Malicious code in utopia-ecosystem-csh952-project (npm)

The package utopia-ecosystem-csh952-project was found to contain malicious code...

Malicious code in aroma-ecosystem-gsn760-project (npm)

The package aroma-ecosystem-gsn760-project was found to contain malicious code...

brick (0.0.0), bud (>=0.0.0, <=0.1.2) +16 more potentially affected by unknown CVE via first-val (0.0.0)

first-val NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on first-val and may be impacted: - brick 0.0.0 - bud =0.0.0, =0.0.5, =0.0.0, =0.0.0, =0.0.7, =0.0.9, =0.1.0, =0.0.0, =3.1.1, =0.0.0, =0.0.4, =0.0.0, =0.0.2 and more Source cves:...

Malicious code in ecosystem-violet-xqw050-project (npm)

The package ecosystem-violet-xqw050-project was found to contain malicious code...

Malicious code in ecosystem-grove-wfv387-project (npm)

The package ecosystem-grove-wfv387-project was found to contain malicious code...

23march (1.0.0), @castyiglitchxz/alert-box-package (>=1.0.0, <=1.2.5) +30 more potentially affected by unknown CVE via node.js (0.0.1-security)

node.js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on node.js and may be impacted: - 23march 1.0.0 - @castyiglitchxz/alert-box-package =1.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.1, =1.0.5, =1.0.0, =1.2.5, =1.2.1, =0.0.1, =2.2.0,...

big-integer-max (1.0.0), big-integer-min (>=1.0.0, <=1.0.1) +25 more potentially affected by unknown CVE via just-next-tick (0.0.0)

just-next-tick NPM version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on just-next-tick and may be impacted: - big-integer-max 1.0.0 - big-integer-min =1.0.0, =0.0.3, =0.0.0, =0.0.0, =0.0.0, =0.0.1, =0.0.9 and more Source cves: unknown CVE Sour...

alert (>=0.0.0, <=0.0.1), audio-play (1.0.0) +13 more potentially affected by unknown CVE via new-chain (>=0.0.0, <=2.0.0)

new-chain NPM version =0.0.0, =0.0.0, =0.0.0, =1.0.1, =0.0.0, =0.0.9, =0.0.0, =3.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27356...

com.prototyper.openai-editor-tool (0.1.3) potentially affected by unknown CVE via com.unity.nuget.newtonsoft-json (0.0.1-security)

com.unity.nuget.newtonsoft-json NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on com.unity.nuget.newtonsoft-json and may be impacted: - com.prototyper.openai-editor-tool 0.1.3 Source cves: unknown CVE Source advisory:...

Malicious code in fs (npm)

The package fs was found to contain malicious code...

Malicious code in ecosystem-thistle-tru313-project (npm)

The package ecosystem-thistle-tru313-project was found to contain malicious code...

Malicious code in ecosystem-iceberg-chk796-project (npm)

The package ecosystem-iceberg-chk796-project was found to contain malicious code...

Malicious code in ecosystem-butterfly-zeu344-project (npm)

The package ecosystem-butterfly-zeu344-project was found to contain malicious code...

memoize-with-leveldb (>=0.0.0, <=0.0.1), radio-paradise-api (>=0.0.0, <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0, <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4, <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...