Lucene search
+L

2397 matches found

Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in invalid-polyfill-boundary (npm)

Source: ossf-package-analysis 0fbf998b1c11f6a785806e2ab4f0bbbc4da9a95e803f643a497d41215484a11d The OpenSSF Package Analysis project identified 'invalid-polyfill-boundary' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in internal-plugin-lifecycle-card (npm)

Source: ossf-package-analysis 332aa89488a5ecb7012588f98648ef97de374565f906dfc69ff80d4d344e9a03 The OpenSSF Package Analysis project identified 'internal-plugin-lifecycle-card' @ 99.9.10 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in internal-test-devoxx (npm)

Source: ossf-package-analysis fb92a072265a550a5ce1cc1d16f096b636845bc8edabaf60bddfebad43c423bd The OpenSSF Package Analysis project identified 'internal-test-devoxx' @ 0.0.4 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:14 p.m.•4 views

Malicious code in inter-frontend-svgs (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis cef0c87cb238b6a66e63b6ede215bd1d867b47ff3bcad84258647d55c810c520 The OpenSSF Package Analysis project identified 'inter-frontend-svgs' @ 999.0.0 npm as malicious. It is considered malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•5 views

Malicious code in ing-feat-lu-luxtrust-token-authentication (npm)

Source: ossf-package-analysis 5d7c8b06f4e363cde4609c5bb2971268a310ec0ec691464f7c1159191f308b8c The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-token-authentication' @ 200.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•5 views

Malicious code in ing-feat-mortgage-consent-starter (npm)

Source: amazon-inspector 626d72f10b630f53b78e042906e6724ca662099bfc31e82310575ea19452576f The package ing-feat-mortgage-consent-starter was found to contain malicious code. Source: ossf-package-analysis 1afe25b50bb9c4fb8cf4338ff4c2088058cafa2cebd36e5ca18b5348bee6d6e4 The OpenSSF Package Analysis...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•5 views

Malicious code in ing-feat-lu-luxtrust-scan-authentication (npm)

Source: ossf-package-analysis 7a039831f4f0151208c7b3baf088dc5e4ca8dd88bbcbc4b5317c3b5e278557e7 The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-scan-authentication' @ 200.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:13 p.m.•4 views

Malicious code in index-template-mets (npm)

Source: ossf-package-analysis 104f2ff9714322069aa6e619d7050de41349e85f4c3eaa04c4c25ba0e239e8a9 The OpenSSF Package Analysis project identified 'index-template-mets' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:12 p.m.•7 views

Malicious code in ifood-github-io (npm)

Source: ossf-package-analysis 8e523e57e2b34793b9a65626a1c74932d6b6b5339b658b78187d5fcb22f2563e The OpenSSF Package Analysis project identified 'ifood-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 8:12 p.m.•6 views

Malicious code in ifood2-github-io (npm)

Source: ossf-package-analysis a15f07f3dda7d132a00d57e04e31bc1c982857fc28d86ec6934974c3ad314723 The OpenSSF Package Analysis project identified 'ifood2-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 5:01 a.m.•7 views

Malicious code in httpsearch (npm)

Source: ossf-package-analysis 0e64993dc2fc1fcf09ccd51e2f05f711cd08217f3f32fe72847a0e545ab39199 The OpenSSF Package Analysis project identified 'httpsearch' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. -...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:59 a.m.•7 views

Malicious code in heft-example-plugin-01 (npm)

Source: ossf-package-analysis 38de8533a1fa4ae454f1c4c690239b429820ddf54aa69925be16c418d54f6a2b The OpenSSF Package Analysis project identified 'heft-example-plugin-01' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:59 a.m.•4 views

Malicious code in happa (npm)

Source: ossf-package-analysis 1f34c3c3c27c46dc70ca4b7ab3854f396ae790248623d6ac2f5078244ece0a73 The OpenSSF Package Analysis project identified 'happa' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•3 views

Malicious code in hackerone-internal-test (npm)

Source: amazon-inspector f16e6417e8eaebc0aa37552f263af3e1445a1a3cb50245074d579c9b818a73e6 The package hackerone-internal-test was found to contain malicious code. Source: ossf-package-analysis bfdfbd2c4795ff2ac1d19674c5c5fd86667f0315fd25051a34b1761e28840dec The OpenSSF Package Analysis project...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:58 a.m.•4 views

Malicious code in guppy-dev (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis b56a4d108a100f12dd3aedb0e1f0f3b8007ecc181e366198a22242473696f219 The OpenSSF Package Analysis project identified 'guppy-dev' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:57 a.m.•3 views

Malicious code in gopro-plus-downloader (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 0b9c793ed989d9e7bcf7e79620314116cdbc0c15f39094843d8dafab2313fbae The OpenSSF Package Analysis project identified 'gopro-plus-downloader' @ 13.0.1 npm as malicious. It is considered malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:57 a.m.•5 views

Malicious code in google-requests (npm)

Source: ossf-package-analysis 1f65c90bd401794ac768545381277a23159e66aa5b42a5ea05a38780fbcd691a The OpenSSF Package Analysis project identified 'google-requests' @ 99.2.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/13 4:57 a.m.•4 views

Malicious code in google-map-markerclusterer (npm)

Source: ossf-package-analysis 7d6f6cce68b78a64c491ce96d722b6ae80bb91893fd7933538540e99bd4e30a9 The OpenSSF Package Analysis project identified 'google-map-markerclusterer' @ 1.2.8 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

5.9AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•4 views

Malicious code in expirs (npm)

Source: amazon-inspector 86105842d926ee95e61ae8adf0d4506cbc55c9510189208ee33d511806f2c5ef The package expirs was found to contain malicious code. Source: ossf-package-analysis d82cf6807fa6c011a17d3f4e8bf8af1e3e935a3d79ab1420356fd87d3f2567de The OpenSSF Package Analysis project identified 'expirs'...

5.8AI score
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
•added 2026/09/10 10:46 a.m.•5 views

Malicious code in expeewas (npm)

Source: amazon-inspector bcb3aafc860058ba4e9a64c6fa7dba85b7df72d68971ef7c673245e4ac02820f The package expeewas was found to contain malicious code. Source: ossf-package-analysis 1139816aec09701aa03df7d77ec7cde1f0d119ecd358a6417dc28ad0f53cd99c The OpenSSF Package Analysis project identified...

5.8AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder