MAL-2025-41445 Malicious code in appdg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e113734f7adb98889a87ee63068bc833862aced8bd49bb11af5adc6f5bc37797 The OpenSSF Package Analysis project identified 'appdg' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41444 Malicious code in blank-hacker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7571808edafde35b1c18ed118dd2c5e38669d09a9b24f81de0d04d2af8617a The OpenSSF Package Analysis project identified 'blank-hacker' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-42129 Malicious code in pp-react-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71193da54e6cdc258489d02db5987830a3bc147cbf9b43236f5757cab04f9c73 The OpenSSF Package Analysis project identified 'pp-react-grid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-42130 Malicious code in pp-react-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb754d012bc21065e6e4e5d42668a8b226bb1c18d2f8ef04c9ce6a2a8b9f1c47 The OpenSSF Package Analysis project identified 'pp-react-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in pp-react-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb754d012bc21065e6e4e5d42668a8b226bb1c18d2f8ef04c9ce6a2a8b9f1c47 The OpenSSF Package Analysis project identified 'pp-react-icons' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in pp-react-segmented-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3aa7d1e64be7773bd65b53e4d68407a98eb87811a768245a3cb7d1dd1980516d The OpenSSF Package Analysis project identified 'pp-react-segmented-controller' @ 99.0.2 npm as malicious. It is considered malicious because: -...

MAL-2025-42124 Malicious code in @flight-common/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f79d53932b1163ec8f1f13fbb18de9439278bcf7ee1fe90dcd53d0349d24b72 The OpenSSF Package Analysis project identified '@flight-common/services' @ 1.2.9213 npm as malicious. It is considered malicious because: - The...

MAL-2025-42125 Malicious code in @liquid-web/core-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f9afbcbd82f8b0c7374b5e9edb81329aa506296ef39a5a63d70d59af7591e74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @flight-common/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10b5cb816f030297707c6e9ae79f7916de698fd58c8b068b18ef716c7425240b The OpenSSF Package Analysis project identified '@flight-common/components' @ 1.2.9213 npm as malicious. It is considered malicious because: - T...

Malicious code in dyff-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ff04e58382838776c99078bc025fafbd4e9eb12205055f6f89510bb28976c57 The OpenSSF Package Analysis project identified 'dyff-plugin' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in epc-ui-tour (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 564b0da0b00f30ef4d3e9c7c03c624fe43365f10b3c1fa049ce0e7148373af4c The OpenSSF Package Analysis project identified 'epc-ui-tour' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in uitk_hb_button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 78827a994bce4fe2727c49ef451312308ad218c90e040d3ffec05b50385a488f The OpenSSF Package Analysis project identified 'uitkhbbutton' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41433 Malicious code in uitk_hb_button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 78827a994bce4fe2727c49ef451312308ad218c90e040d3ffec05b50385a488f The OpenSSF Package Analysis project identified 'uitkhbbutton' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in uitk_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc864b28374d03fb38eaeac8bc4b8479334114789acb4be7c5f43a9a738d990c The OpenSSF Package Analysis project identified 'uitki18n' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execute...

Malicious code in byresfsdfdsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b1380ef63b7b2c52e98cf7f5aebaa23316da368c8a3f7a00faf0e36b8fa8472 The OpenSSF Package Analysis project identified 'byresfsdfdsdf' @ 2.3.2 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41348 Malicious code in byresfsdfdsdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b1380ef63b7b2c52e98cf7f5aebaa23316da368c8a3f7a00faf0e36b8fa8472 The OpenSSF Package Analysis project identified 'byresfsdfdsdf' @ 2.3.2 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41428 Malicious code in depconfusioncheckdontuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 418af2d7f71a71a583c43b84d18214ede68763f87513cb692962a4567ff24cdb The OpenSSF Package Analysis project identified 'depconfusioncheckdontuse' @ 1.2.1 npm as malicious. It is considered malicious because: - The...

Malicious code in my-first-npm-package-1337 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 622f63f2210c8958193f9ce9c83001c67fc6cf798441e7235c0aa4c7f1efa82f The OpenSSF Package Analysis project identified 'my-first-npm-package-1337' @ 1.0.2 npm as malicious. It is considered malicious because: - The...

MAL-2025-41435 Malicious code in initialtestingdonotpull1235 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 638020a87c6e1aaf4b8542a5b20723a6ed900b986bfd407c8bf55aad3016933f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in initialtestingdonotpull1235 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 638020a87c6e1aaf4b8542a5b20723a6ed900b986bfd407c8bf55aad3016933f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...