Malicious code in verizon-media-open-source-project-protal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5effa09096e10b22706af0dd8301a46baa8c707c7979154017d0493e25abf88 The OpenSSF Package Analysis project identified 'verizon-media-open-source-project-protal' @ 2.0.1 npm as malicious. It is considered malicious...

Malicious code in mint-backend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13804e154bae1eba072cd15e94a81c7d0e03e959552fd66f99f4c9de162b2db2 The OpenSSF Package Analysis project identified 'mint-backend' @ 2.0....

MAL-2025-6865 Malicious code in azure-documentdb-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ae212af083dc32114fe6584d59ab57ac5b5c3b77d59d83cd62af05f8706cdf0 The OpenSSF Package Analysis project identified 'azure-documentdb-node' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-6920 Malicious code in dagger-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8....

Malicious code in solana-pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45d581c17210e8be2e111136cc9853e7c698eaabd46c44482037ba1436c5b9a0 The OpenSSF Package Analysis project identified 'solana-pump-sdk' @ 1.4.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in jenkins-trigger-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fedbad1242e09329c414a95c493ce62c39c15cad4472ef5fc4a8b9b836834fb4 The OpenSSF Package Analysis project identified...

MAL-2025-6932 Malicious code in gopro-plus-downloader (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b9c793ed989d9e7bcf7e79620314116cdbc0c15f39094843d8dafab2313fbae The OpenSSF Package Analysis project identified 'gopro-plus-downloade...

Malicious code in gopro-plus-downloader (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b9c793ed989d9e7bcf7e79620314116cdbc0c15f39094843d8dafab2313fbae The OpenSSF Package Analysis project identified 'gopro-plus-downloade...

Malicious code in dpais-chat-template-pwa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc The OpenSSF Package Analysis project identified...

MAL-2025-6923 Malicious code in dpais-chat-template-pwa (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc The OpenSSF Package Analysis project identified...

MAL-2025-6924 Malicious code in electron-test-main (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 64731d49ad099a9f118a9485fb5568a4f594576ed888e0bb96f7f278853ec158 The OpenSSF Package Analysis project identified 'electron-test-main' ...

Malicious code in @eooce/sbx (npm)

The package @eooce/sbx was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c3f68a08af76f3c5412daa2b25a618ab31f5541ee496dec1392afedcf86ec33 The OpenSSF Package Analysis project identified '@eooce/sbx' @ 2.0.7 npm as maliciou...

Malicious code in @seznam-diskuze/embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03c95e188163b615484b4882358ea8d4a9411661fa3bb701052fd608c8f6c4b7 The OpenSSF Package Analysis project identified '@seznam-diskuze/embed' @ 100.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-6828 Malicious code in @seznam-diskuze/embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03c95e188163b615484b4882358ea8d4a9411661fa3bb701052fd608c8f6c4b7 The OpenSSF Package Analysis project identified '@seznam-diskuze/embed' @ 100.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-6825 Malicious code in intel-quantum-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa156b1cde9820ee0b03c5c4a594de333baa592c69177eb84a7c8ddf13963208 The OpenSSF Package Analysis project identified 'intel-quantum-sdk' @ 1.5.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6824 Malicious code in facebook-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0ca4dfebc7839330f25a231f2f87af41aef50ea715541751bef46a1709f045e The OpenSSF Package Analysis project identified 'facebook-for-woocommerce' @ 3.6.6 npm as malicious. It is considered malicious because: - The...

Malicious code in require-turbo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b488e13ee585b7b97c9cba93c25b1a58678d591f8ef16720f812f047be16f3d The OpenSSF Package Analysis project identified 'require-turbo' @ 99.0.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in nestjs-datadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd646630e4e4b32350e3698792f7e678a5be4aa1167c630d0bef9cb4d491c441 The OpenSSF Package Analysis project identified 'nestjs-datadog' @ 500.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in poloman (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ddad11abce315f670c04e89d4e0adc1cd0b1bbd6a7de8d1715d74bf8d99ca4d The OpenSSF Package Analysis project identified 'poloman' @ 9.2.1 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in scaleft (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b304783defab6618943757f6247da4093e044290fe48dcd911c3362d05502ad The OpenSSF Package Analysis project identified 'scaleft' @ 1.7.7 npm...