Malicious code in regiepult (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb97746019afc4520cfc1ec58e6a89d054badad6b99024ec45a5c368ccc2bead The OpenSSF Package Analysis project identified 'regiepult' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in castorama.pl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 730bed67861cb1d30e187eb40b957257e8395b86e8a9e255005ba3b808369878 The OpenSSF Package Analysis project identified 'castorama.pl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @johndeere-tech/helios-mat-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 226a36baff3a45f171643849384a2b5ba6f9120f2a98d58b2589fc9381fc1c8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zqdllqdz15975321 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de6b890c4ed0e92b46092818376b4dac9d924307df67e0ab8e277947b3844718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eclipse-tractusx-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5357a55497ee86b69ff4768aee0d28461a0f024df6f74c50c2511d1032cf3128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ccfk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e4078a85a3be32051188e1ab1422012bc936d9b067d3f3968a89b6bba7af925 The OpenSSF Package Analysis project identified 'ccfk' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in tec-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2ef98a8d8e55d815b7f3d3955fb72a5387e95a9f22ab1702df9d88b2c152a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lwc-recipes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92235263cd97e4d59a59394c77aeabcc20e347bda974b68b18072cf74295f12c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vulnerable-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39aee709a198819a063291a6ebb8c985b0335af324647cdc6492671701bfb294 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-signature (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0bbf0594c1ce65a05bd238b874f3af6810ddb8729b2f913150d08d07f6a323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2561 Malicious code in chatbot-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af371ce3024a5ed217ff2baf8b2a9443cf92ae8a1993552e3679be6f83698a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chatbot-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5af371ce3024a5ed217ff2baf8b2a9443cf92ae8a1993552e3679be6f83698a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2560 Malicious code in n11-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 635a6c33b57671f2fb87f2c61834328fccebe10874b03573fbacc4b04c495fb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yellowcard-styling-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 12dee9a88b4f374a8db73de73d255757719bcc1d3124dfe2599b3dbfe3a49d6d This package installs a dependency hosted on a custom domain that runs an info stealer during installation. The info stealer focuses on...

Malicious code in symphony-duplicates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e54af5b1a89c7dc74174e2e2bd4c55e97073e7849853a7b67aa0503104e1b194 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in antlir2-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 580dffd4893c96ae46965b4244381b9fcc03d13cdd1cf32b89bb7a0eee2521e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ionicaiosampleapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae3e09f0b7537140686ef5504c21e18b301f44e502feb68aad99bd4c5346a876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatsapp-sdk-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 788206c160622c7c87f5e0b19b4be9383f89a8918fa3aace86ec99350a06daa4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starrocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d61ee110d66f318505d0819f7b6e5ebf2b3767911b91e2748bdf5a911decbcb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...