Malicious code in typespec-http-dispatcher (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7c439ba2209388ade9aba27b75e50772bef4afa861aaaf5b7abf6b447a1620 The OpenSSF Package Analysis project identified...

Malicious code in typescript-5.3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22e5eb382ae93ec26870214b5e9a2d6b039c55967a550969c2ccdf758b96f911 The OpenSSF Package Analysis project identified 'typescript-5.3' @...

MAL-2025-41331 Malicious code in temp-nextjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfe72049bd612f29f827f8066a860bf194d84a26a428ae527df672b1428c39b The OpenSSF Package Analysis project identified 'temp-nextjs' @ 99.0....

Malicious code in suppressions (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e3b924c14ff9c22bdc7afa4f89f7d776286be2e98bbbf1554f47af0a5944dc9 The OpenSSF Package Analysis project identified 'suppressions' @ 99.0...

Malicious code in rush-cyclic-dep-1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc3b2fad762b8091211ef41ee84b4321f34789e8957982339cb99ad5c439f9bf The OpenSSF Package Analysis project identified 'rush-cyclic-dep-1' @...

Malicious code in schema-author (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d20adbaf902fa0024093fa6d9d1b21fe5c6f50e1fd5f11e13549e4cfe38e6de4 The OpenSSF Package Analysis project identified 'schema-author' @...

MAL-2025-41327 Malicious code in rushjs.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d99306a850859fbf00f66d5e98426eded1c24eeb8f7b5e60f3255e4ad09c661 The OpenSSF Package Analysis project identified 'rushjs.io' @ 99.0.9...

Malicious code in rush-cyclic-dep-2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e5cc5e314974fca4f3bebd4496f775715aaac26a94fcde395ec10bae8ac3758 The OpenSSF Package Analysis project identified 'rush-cyclic-dep-2' @...

MAL-2025-41325 Malicious code in rush-cyclic-dep-2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e5cc5e314974fca4f3bebd4496f775715aaac26a94fcde395ec10bae8ac3758 The OpenSSF Package Analysis project identified 'rush-cyclic-dep-2' @...

Malicious code in rush-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94450add30af54a15bf43058886e06c741fa6040846b8b23301194b2f412d6a1 The OpenSSF Package Analysis project identified 'rush-b' @ 99.0.9 npm...

MAL-2025-41322 Malicious code in rush-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94450add30af54a15bf43058886e06c741fa6040846b8b23301194b2f412d6a1 The OpenSSF Package Analysis project identified 'rush-b' @ 99.0.9 npm...

Malicious code in rush-c (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 87ef3df74ad4f8e39b88d949f7728ee14fe93ba9ff8edb5efa5ca9a154630504 The OpenSSF Package Analysis project identified 'rush-c' @ 99.0.9 npm...

MAL-2025-41323 Malicious code in rush-c (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 87ef3df74ad4f8e39b88d949f7728ee14fe93ba9ff8edb5efa5ca9a154630504 The OpenSSF Package Analysis project identified 'rush-c' @ 99.0.9 npm...

MAL-2025-41328 Malicious code in rushstack.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdbdcfcb0c56177e742512b03975fd3c12ca8cbb90f6665be32a6fde5d6ef93 The OpenSSF Package Analysis project identified 'rushstack.io' @ 99.0...

Malicious code in rushstack.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdbdcfcb0c56177e742512b03975fd3c12ca8cbb90f6665be32a6fde5d6ef93 The OpenSSF Package Analysis project identified 'rushstack.io' @ 99.0...

Malicious code in remark-canonical-link-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b975fb6f22bd9fcdcea9c2ef29c6fadc73269624920351490d8cda8e561199d The OpenSSF Package Analysis project identified...

MAL-2025-41320 Malicious code in remark-cross-site-link-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c7fd443fcaba7627f28aa45f16610fef8703f54b0f2dad9c22642c2d428a278 The OpenSSF Package Analysis project identified...

Malicious code in remark-cross-site-link-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c7fd443fcaba7627f28aa45f16610fef8703f54b0f2dad9c22642c2d428a278 The OpenSSF Package Analysis project identified...

MAL-2025-41312 Malicious code in msalv2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca3fbaf2aacbd857c8661a88233c1a756fd75c6f60d675a32374d9c95cc019e The OpenSSF Package Analysis project identified 'msalv2' @ 99.0.9 npm...

Malicious code in photo-agent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5815b50954cc097d97f91fcab8cd626c3f40231a4b7950124b8308ff21ca1bd4 The OpenSSF Package Analysis project identified 'photo-agent' @ 99.0....