Malicious code in rose-bn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b255ebbe2f749770901182d7be69641b1f7e94bacd94fff31794262c33d998af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-kaks3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 591289fef82efe1b6a54e8948561a76e1e42addd4e1b62fe61364c894640b6b9 The OpenSSF Package Analysis project identified 'test-kaks3c' @ 10.0.4 npm as malicious. It is considered malicious because: - The package...

Malicious code in euf-ele-hf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7cfc361d149da8b9d35ea0df759689a516eed93545d9966146e4652bc08aa2a The OpenSSF Package Analysis project identified 'euf-ele-hf' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in redis_mktg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3e4bfe8fa5f34f6edef1cea4e6382724b544018847e65babd924cce89ede995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in modeldb-vis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a96162bc850d1cdd271c5fba070bedf3477359301f09f9991c578413eefc136 The OpenSSF Package Analysis project identified 'modeldb-vis' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in angular2-tesla-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7134a794a37bf8aae8607bb577adf8e9b11e74f9d080a48a1a4f935fb06a8b7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3137 Malicious code in rlusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 629e6d48825f1e58a7575a37bc976ac9d955d1e6b0a8a3782539fd168ddc570e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clarunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecdc65ad87798f6243b3d284367e755b52beb5eef68fcc0ca08b0b802230643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-utils-bronxi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2c2b247fbdf1610b485929f50b7e3394cf7f7d524a747b5941f0c64563f4407 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fraudprevention/device-intelligence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4499ba2c16cf02f2e12c45bba95e21bd588726f331f7a7a7f8eecfbb0369cafc The OpenSSF Package Analysis project identified '@fraudprevention/device-intelligence' @ 100.99.100 npm as malicious. It is considered malicious...

Malicious code in snyk-malware-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7aeae88b889d949c7ba644287aedbedf75ee127f6628eac66f1d18650e5ed899 The OpenSSF Package Analysis project identified 'snyk-malware-poc' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in ria-learninghub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a83f503eead43ba3f08b93a32822c4c075b0029c73b852b2fec0871457b3ed26 The OpenSSF Package Analysis project identified 'ria-learninghub' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in nextmvc3primary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9d8a367c5538d9d76897813994ee49411b97862b8fa79250cb918d36c78f5a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in regiepult (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb97746019afc4520cfc1ec58e6a89d054badad6b99024ec45a5c368ccc2bead The OpenSSF Package Analysis project identified 'regiepult' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2798 Malicious code in regiepult (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb97746019afc4520cfc1ec58e6a89d054badad6b99024ec45a5c368ccc2bead The OpenSSF Package Analysis project identified 'regiepult' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in castorama.pl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 730bed67861cb1d30e187eb40b957257e8395b86e8a9e255005ba3b808369878 The OpenSSF Package Analysis project identified 'castorama.pl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @johndeere-tech/helios-mat-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 226a36baff3a45f171643849384a2b5ba6f9120f2a98d58b2589fc9381fc1c8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zqdllqdz15975321 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de6b890c4ed0e92b46092818376b4dac9d924307df67e0ab8e277947b3844718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eclipse-tractusx-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5357a55497ee86b69ff4768aee0d28461a0f024df6f74c50c2511d1032cf3128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ccfk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e4078a85a3be32051188e1ab1422012bc936d9b067d3f3968a89b6bba7af925 The OpenSSF Package Analysis project identified 'ccfk' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates...