Malicious code in customprefix-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af67fc99b5f6993bf42c27c8c407c6bee3e97d0f412d03ab30533470b86339d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helmet-fastapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c1f805932ecbcd95197e98c6e2336eb773252abf5615fe135076d1848cb90395 Package contains hidden code adding a backdoor - a WebSocket path handler which will execute commands sent by an attacker knowing the path. In addition, it add...

Malicious code in climate-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1f505af92d5dfcdcfb8990f655cb13aa0ccaf3d7c00001658e3b12ca3a5080d The OpenSSF Package Analysis project identified 'climate-wallet' @ 1.2.34 npm as malicious. It is considered malicious because: - The package...

Malicious code in amazon-chime-sdk-js-exp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41b8665f77f2bb83789c04cdd6973e2525d3af8609a0e4fc6f41e7b460eb1b51 The OpenSSF Package Analysis project identified 'amazon-chime-sdk-js-exp' @ 10.10.100 npm as malicious. It is considered malicious because: - Th...

Malicious code in my-rei-browser-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c686104ae598e6be85ee3b485920aef58f29d1ece0db3383bbca1afa64b8f405 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @template-builder/iframe-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d449b73ecd5ceb50edae265044e9523e1608eafa7389e2e46f139ea57a4e37aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rose-bn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b255ebbe2f749770901182d7be69641b1f7e94bacd94fff31794262c33d998af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-kaks3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 591289fef82efe1b6a54e8948561a76e1e42addd4e1b62fe61364c894640b6b9 The OpenSSF Package Analysis project identified 'test-kaks3c' @ 10.0.4 npm as malicious. It is considered malicious because: - The package...

Malicious code in euf-ele-hf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7cfc361d149da8b9d35ea0df759689a516eed93545d9966146e4652bc08aa2a The OpenSSF Package Analysis project identified 'euf-ele-hf' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in redis_mktg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3e4bfe8fa5f34f6edef1cea4e6382724b544018847e65babd924cce89ede995 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in modeldb-vis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a96162bc850d1cdd271c5fba070bedf3477359301f09f9991c578413eefc136 The OpenSSF Package Analysis project identified 'modeldb-vis' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in angular2-tesla-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 750e5a71820465f7842a06b6cbaa034cd7f4bf78fb9f20b44e5785088ae8b61a The OpenSSF Package Analysis project identified 'angular2-tesla-common' @ 99.99.103 npm as malicious. It is considered malicious because: - The...

MAL-2025-3137 Malicious code in rlusd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 629e6d48825f1e58a7575a37bc976ac9d955d1e6b0a8a3782539fd168ddc570e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clarunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecdc65ad87798f6243b3d284367e755b52beb5eef68fcc0ca08b0b802230643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-utils-bronxi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b060b166dc77a08c11be2e3aae8d81e5f55f83f1838197b6332c9caf1ed3540 The OpenSSF Package Analysis project identified 'internal-utils-bronxi' @ 100.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @fraudprevention/device-intelligence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4499ba2c16cf02f2e12c45bba95e21bd588726f331f7a7a7f8eecfbb0369cafc The OpenSSF Package Analysis project identified '@fraudprevention/device-intelligence' @ 100.99.100 npm as malicious. It is considered malicious...

Malicious code in snyk-malware-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7aeae88b889d949c7ba644287aedbedf75ee127f6628eac66f1d18650e5ed899 The OpenSSF Package Analysis project identified 'snyk-malware-poc' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in ria-learninghub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a83f503eead43ba3f08b93a32822c4c075b0029c73b852b2fec0871457b3ed26 The OpenSSF Package Analysis project identified 'ria-learninghub' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in nextmvc3primary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9d8a367c5538d9d76897813994ee49411b97862b8fa79250cb918d36c78f5a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2798 Malicious code in regiepult (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb97746019afc4520cfc1ec58e6a89d054badad6b99024ec45a5c368ccc2bead The OpenSSF Package Analysis project identified 'regiepult' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...