Malicious code in zora1abs-co1ns-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b206060bd52cecf8193f550d58c64d304f0f31ca11f58b0252f883bb574b41c8 Any computer that has this package installed or running should be considered...

Malicious code in com.unity.dt.app-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22edbd19ec2c1688066d58a9c5836e4bcd30e7c64221187b158ccd8b65895932 Any computer that has this package installed or running should be considered...

Malicious code in routerprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bb5da39b59767e758d61cc281539a1860fb4914fc3b6a63e5bb7adfc9a4e12e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plugin-proposal-private-methods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c0bb5e1a8b40dd1e99594481c6671cd4b01e1864b590ece14a07e6b241af7bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cmp-spid-login (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4229460b134c6c1fe4e3accbf1756e1706643a8d37bfd8a3cbe2817c11d4ced The OpenSSF Package Analysis project identified 'cmp-spid-login' @...

Malicious code in volehai-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695b1f1647ff88855017c178d47ab04527b14c3817e9b4ed343c1220cc7b18df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in os-apps-ui-curvelibrary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0119e0d30c93e83b68f00c9ab5d2f00f90d631cf3e692cab103e99c3ca6331b5 The OpenSSF Package Analysis project identified 'os-apps-ui-curvelibrary' @ 11.1.20 npm as malicious. It is considered malicious because: - The...

Malicious code in frontend-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84270f7cb41eec813ccd947f1510d8849dc7ec317990d0be20450a14a28d69e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-esm-federation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f7926dff38c759aa63ad9b55035d541c0512f6796681961dcd734e4d77cacc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in connectnodewebclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72fc085bcccf174a0e94231d33f82e278941f6a8b7d9fa72f1f83ae85902b993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontegg-nuxt-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dfeb24eb6c59e883dded7166ce9ff73fb43ab8352fcc2a154f86c7bf96be5e8 Any computer that has this package installed or running should be considered...

Malicious code in zoro-gep-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31a52e159d0a3693023b3ef06e39e833dd2b2edbd49add25009006ba7800df90 Any computer that has this package installed or running should be considered...

CVE-2025-45055

Silverpeas 6.4.2 contains a stored cross-site scripting XSS vulnerability in the event management module. An authenticated user can upload a malicious SVG file as an event attachment, which, when viewed by an administrator, executes embedded JavaScript in the admin's session. This allows attacker...

Malicious code in payu-ui-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cf0aeb232e5fb73a346852b81510521a06efd6f05c9b7760e6c13b3644abe68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kubernetes.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00f207ddd7d4909824d1a01b502b9d29b27380e31b9b410162ed5381de2fae41 The OpenSSF Package Analysis project identified 'kubernetes.io' @ 1.0...

Malicious code in c2pa-js (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8983a214dc0d52693f13d8a50f2e5d171641b4b847ce37ea539b48f94971e5e0 Any computer that has this package installed or running should be considered...

Malicious code in www-cfg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e83ae0e09d965d0daf4532cb29c1b79698d342dc5afb338632d224d1f2706cc The OpenSSF Package Analysis project identified 'www-cfg' @ 1.0.2 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in lazy-logrocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d35d13ebfd82c66db49337a0483da4a0c5460498a2a1a5941e45f1b44f05a1f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in virtru-private (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60777031b508b2b27184e7bcdd9afb52ab3ca2e19bda0d7d4dee9333e7ff1190 Any computer that has this package installed or running should be considered...

Malicious code in launch-darkly-provider (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6696ff99444d08a99f63e53ce846b37cf11486968604779920e29d8ca0185d08 Any computer that has this package installed or running should be considered...