MAL-2025-46922 Malicious code in spamurai-dev-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6809fd87c593e76bcb0bd4a719cab9e51e2d3b617f9a172d0a8a2f68a09474e7 The OpenSSF Package Analysis project identified 'spamurai-dev-kit' @ 3.0.1 rubygems as malicious. It is considered malicious because: - The...

MAL-2025-41313 Malicious code in oracle-agent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9d5212e69633af1e55a9b35fa8e007e2b50c2905c3549e44f047e8ab061e157 The OpenSSF Package Analysis project identified 'oracle-agent' @ 99.0...

Malicious code in heft-minimal-rig-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0a085da2f08feb8c00f2c512e03267a7ecdf55cb417d1d0cdb1f663604f95119 The OpenSSF Package Analysis project identified 'heft-minimal-rig-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in invalid-polyfill-boundary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0fbf998b1c11f6a785806e2ab4f0bbbc4da9a95e803f643a497d41215484a11d The OpenSSF Package Analysis project identified 'invalid-polyfill-boundary' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-41289 Malicious code in health-cards-validation-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83454ca0e6e018fdcd3684ad0e163a9220a0e5a2619ea5d348092076d83755e5 The OpenSSF Package Analysis project identified 'health-cards-validation-sdk' @ 99.0.9 npm as malicious. It is considered malicious because: - T...

MAL-2025-41269 Malicious code in @listr1/prompt-adapter-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c9103dcee0afbfa63c69bae22ac8f4e415daef3fcb2610b84d8278b1732f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41249 Malicious code in mv-hosp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4952f8c63bd825b267e27af4ca78405659c40fa6b10ed3687573b348a92c690a Any computer that has this package installed or running should be considered...

Malicious code in sendbird-visual-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c99c539ebeed9289f0f603fbfe2d80bc9fe35f624bbd036ad397617db3be8de2 The OpenSSF Package Analysis project identified 'sendbird-visual-test' @ 11001.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in dva-loading-show-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2779c32d64a46ff3b8b9de62cd9161c7b6e0071c4a3103b2a37e949f374467a0 The OpenSSF Package Analysis project identified 'dva-loading-show-rce...

Malicious code in donotinstallthisistest6 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 272225f1adba5810796fd9c194041e72e5fcdcc032fa296a701bcc480b37bfcb Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in @jssrv/template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce87403bb05aae59ca8877b014a3a8255b54b2a22e930687649c675cc9602f76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @blocks-shared/atom-panel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c591a20fbe6de7639db5ac559fbc7db95960967fb3eb809e6fe2f58943f4a75 The OpenSSF Package Analysis project identified...

Malicious code in pakumaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 900b8179fb7ecc8121b77921a5a6c394547bd506367aed2bc638dbc82985396e The OpenSSF Package Analysis project identified 'pakumaku' @ 9.9.9 npm as malicious. It is considered malicious because: - The package executes...

Malicious code in font-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404db1db5b86b6ce6ed40f2169b12625d010c431f4610548c55dc053f5d43d69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-platform-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e52fc989383c2ba9b074173be333530aa86b44f1fa38e4a7b156ab1bc4fc6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-signature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0bbf0594c1ce65a05bd238b874f3af6810ddb8729b2f913150d08d07f6a323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2561 Malicious code in chatbot-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af371ce3024a5ed217ff2baf8b2a9443cf92ae8a1993552e3679be6f83698a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2efbecb91840f3bd10abd707ee59f45fc25c310b59477444324c0d40c7e128bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nylas-private-sounds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612de4025068333f24bd17ea9b89669c891d1b53d78404a37c1dfaf655126501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in refocus-sgt-trust1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85a58d6e895c9c66ecf3d14b36826200aba02fdf96987b6b7b619c6945dddbfc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...