Malicious code in ecosystem-iceberg-chk796-project (npm)

The package ecosystem-iceberg-chk796-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ecosystem-uranium-fsi579-project (npm)

The package ecosystem-uranium-fsi579-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ecosystem-meadow-dye920-project (npm)

The package ecosystem-meadow-dye920-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ecosystem-mountain-fql199-project (npm)

The package ecosystem-mountain-fql199-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ecosystem-delta-zny302-project (npm)

The package ecosystem-delta-zny302-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ecosystem-ant-mrn019-project (npm)

The package ecosystem-ant-mrn019-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ecosystem-grove-wfv387-project (npm)

The package ecosystem-grove-wfv387-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ecosystem-butterfly-zeu344-project (npm)

The package ecosystem-butterfly-zeu344-project was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dr-service-ecosystem (npm)

The package dr-service-ecosystem was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dewdrop-ecosystem-wtk745-project (npm)

The package dewdrop-ecosystem-wtk745-project was found to contain malicious code. --- Credit: OpenSSF source...

CVE-2026-71428 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-44PJ-7W5J-6H8G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7RJP-WM4X-4X9C vulnerabilities

Vulnerabilities for packages: chromium...

Malicious Package

Overview dajouka-taa-t9a is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview btree-core is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview ecosystem-vortex-vda657-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview efficientstarfishdumbs is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

Malicious Package

Overview ecosystem-opal-lxo696-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview ecosystem-butterfly-zeu344-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview ecosystem-jellyfish-umz952-project is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...