MAL-2025-41283 Malicious code in doc-plugin-rush-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a12c396a6086d8e62fcd6527bd6c4056f50c8def8a668f50a021b0c73a3291be The OpenSSF Package Analysis project identified 'doc-plugin-rush-stack' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in axe-core-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e542b3a8db6b222894a578af53bb9c3d386c930cc296809a2b2ddaac3b31c18 The OpenSSF Package Analysis project identified 'axe-core-scanner' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41281 Malicious code in axe-core-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e542b3a8db6b222894a578af53bb9c3d386c930cc296809a2b2ddaac3b31c18 The OpenSSF Package Analysis project identified 'axe-core-scanner' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41282 Malicious code in azure-ai-foundry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6397746f8f17f740ba33999b71f8e214096f472aaa54614d8603deeb72435c8 The OpenSSF Package Analysis project identified 'azure-ai-foundry' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in android-mobile-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 16297b3163e4c4992c5f935c4d595a2de48dfbe42ff4bb55fb7c15d1f7e6dd6b The OpenSSF Package Analysis project identified 'android-mobile-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-41279 Malicious code in android-mobile-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 16297b3163e4c4992c5f935c4d595a2de48dfbe42ff4bb55fb7c15d1f7e6dd6b The OpenSSF Package Analysis project identified 'android-mobile-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in agent-dispatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70fbbe88de41579cb87272460bf1eba133ca58f846a3ba16dc9182202c03dd6a The OpenSSF Package Analysis project identified 'agent-dispatcher' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41278 Malicious code in agent-dispatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70fbbe88de41579cb87272460bf1eba133ca58f846a3ba16dc9182202c03dd6a The OpenSSF Package Analysis project identified 'agent-dispatcher' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in cookie.gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e19257a4725688794de5a9df6b822ce9a41431ddf4893202ce50a400175d4be2 The OpenSSF Package Analysis project identified 'cookie.gulp' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41277 Malicious code in donuts.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd852600a317ae1df99af9e6cede53d3f54d36b9a400ca672eff6a7146818a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in donuts.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd852600a317ae1df99af9e6cede53d3f54d36b9a400ca672eff6a7146818a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nextjs14-approuter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73539e0dd962fbad2bd7a634bd17a7406d5df3f1c282a29c376d97121625b95f The OpenSSF Package Analysis project identified 'nextjs14-approuter' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41274 Malicious code in nextjs14-approuter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73539e0dd962fbad2bd7a634bd17a7406d5df3f1c282a29c376d97121625b95f The OpenSSF Package Analysis project identified 'nextjs14-approuter' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41273 Malicious code in parabol-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74ca7b873b936a65f847ef390b0cbe34ceb97ba32b0153888623b60c61f4b335 The OpenSSF Package Analysis project identified 'parabol-client' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @listr1/prompt-adapter-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c9103dcee0afbfa63c69bae22ac8f4e415daef3fcb2610b84d8278b1732f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41268 Malicious code in api-react125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d2f6ad3f3d48477a940b0ade2ae623d9001486fb2dee5c4f448fa429a9165879 The OpenSSF Package Analysis project identified 'api-react125' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in api-react125 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d2f6ad3f3d48477a940b0ade2ae623d9001486fb2dee5c4f448fa429a9165879 The OpenSSF Package Analysis project identified 'api-react125' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in api-react12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 374907a2a16eece2c53ad49cdf418645492c72660b5bf4ae22a0ce80d08145d9 The OpenSSF Package Analysis project identified 'api-react12' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41267 Malicious code in api-react12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 374907a2a16eece2c53ad49cdf418645492c72660b5bf4ae22a0ce80d08145d9 The OpenSSF Package Analysis project identified 'api-react12' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in sdp-transform-parser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f0bf5deb53b6f1424914462ad86d16738a1118a744d709e3e37abaf8907134 The OpenSSF Package Analysis project identified 'sdp-transform-parser...