Malicious code in arlo-meeting-assistant-backend (npm)

Source: amazon-inspector 842ae675e3d076ecc89e2697ee378f503945bae268487584277cd92a93ec44fe The package arlo-meeting-assistant-backend was found to contain malicious code. Source: ossf-package-analysis a5f81fa886f0a4b61383fb0be2bab79f2dae595eecd845a065a67cd9d57bf636 The OpenSSF Package Analysis...

Malicious code in api-react12 (npm)

Source: ossf-package-analysis 374907a2a16eece2c53ad49cdf418645492c72660b5bf4ae22a0ce80d08145d9 The OpenSSF Package Analysis project identified 'api-react12' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ...

Malicious code in aog-lib (npm)

Source: ossf-package-analysis 741266c7bad6d1e60680d0242b4f212454b09ca9647a683b5b314b262760943d The OpenSSF Package Analysis project identified 'aog-lib' @ 2.2.4 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The...

Malicious code in angular-mep (npm)

Source: ossf-package-analysis 681355ff3db8d03fa0216e4ff152cb0be7e3cd485423c68fc2d3b33c8feae3a5 The OpenSSF Package Analysis project identified 'angular-mep' @ 1.3.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. -...

Malicious code in angl-archtslint (npm)

Source: ossf-package-analysis e5d9cbbc6608e412a429d0d62fb5d10c38aa9be4ceb86df876f1f1aaafeb52ec The OpenSSF Package Analysis project identified 'angl-archtslint' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...

Malicious code in android-mobile-agent (npm)

Source: ossf-package-analysis 16297b3163e4c4992c5f935c4d595a2de48dfbe42ff4bb55fb7c15d1f7e6dd6b The OpenSSF Package Analysis project identified 'android-mobile-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in amhairc-web (npm)

Source: ossf-package-analysis 13d3cfae40288462dfd8b822c93d41e65a99b5d16d94e0c3ba536eaf9b5ee0bd The OpenSSF Package Analysis project identified 'amhairc-web' @ 6.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior...

Malicious code in alicenpmpackage13 (npm)

Source: amazon-inspector c4183158dd9ab68784bc126821795cf166b7f2c828d67f46efc533d3859a4342 The package alicenpmpackage13 was found to contain malicious code. Source: ossf-package-analysis 0cc228d0f305f22b2323c3c546470b1b4630ef8cff3778281e0776040d16efc2 The OpenSSF Package Analysis project identifi...

Malicious code in aiohappyeyeballs (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 2059da56cd060292843a9bf0b02a2c41b90d84e83b5b15aa59580a8bc9084a23 The OpenSSF Package Analysis project identified 'aiohappyeyeballs' @ 0.1.4 npm as malicious. It is considered malicious because...

Malicious code in afk-react-intl (npm)

Source: ossf-package-analysis 807b3bc717a7c8f60ecb69d7653fd0942431e9e6adf27cb34e2f68b4bae06cec The OpenSSF Package Analysis project identified 'afk-react-intl' @ 99.99.99 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in addthis-wordpress-plugin (npm)

Source: ossf-package-analysis 6d8ae72ce3501b8463193222bf9bebe2913ee52bf39fb10c8c9aa2f2049ebaa5 The OpenSSF Package Analysis project identified 'addthis-wordpress-plugin' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with maliciou...

Malicious code in com.db.autobahn.notification-center-electron (npm)

Source: ossf-package-analysis fe0ae07b99c275a092bcb2e4836aeb711a02f98def45f54f91bcf5ba38873807 The OpenSSF Package Analysis project identified 'com.db.autobahn.notification-center-electron' @ 88.88.2 npm as malicious. It is considered malicious because: - The package executes one or more commands...

Malicious code in @elc-online/up-analytics (npm)

Source: ossf-package-analysis e659619abda05c9d3835997471d962784e947fd65960e24146082b596d015d6e The OpenSSF Package Analysis project identified '@elc-online/up-analytics' @ 99.99.99 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with...

Malicious code in typescriptt-cli (npm)

Source: amazon-inspector 023f754538f603fbb5379ee8be82cb9524f710495e5dddc4e631e5aafbf323b5 typescriptt-cli is a typosquat of typescript-cli whose index.js is an empty module; its only real behavior is in scripts/postinstall.js. On npm install, the postinstall script XOR-decodes a hardcoded byte...

Malicious code in @zscaler/ec-domain (npm)

Source: ossf-package-analysis 31bceaac08bb6d621ea722590b8ba815799a6af81cc537fa0796ea7983b0f1d2 The OpenSSF Package Analysis project identified '@zscaler/ec-domain' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in @zuora-marketing/linting (npm)

Source: amazon-inspector ddcfd1151af868e694a4a79307ce1284331ad88b8ff631651f3fd2c47fbf342a The package @zuora-marketing/linting was found to contain malicious code. Source: ossf-package-analysis 02e59dfc0bb58f27949258caefffd5c13d5c3af111b8c069edf5ea6e0e985f22 The OpenSSF Package Analysis project...

Malicious code in @zinley/orion (npm)

Source: amazon-inspector cb5209e6394eac2659ab3101809c2a59bf59a604346075a9d923de21d982812e The package @zinley/orion was found to contain malicious code. Source: ossf-package-analysis a95d28c38ccf003df2b9dc25d727029f92363da1024197f4f69e03600edf1f52 The OpenSSF Package Analysis project identified...

Malicious code in fr-ito-web-react (npm)

Source: ossf-package-analysis bac76856f8825e8e433f56d508f0fdc44c9397a172c3cb1935e893de74aa03c1 The OpenSSF Package Analysis project identified 'fr-ito-web-react' @ 99.99.99 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

MAL-2026-13646 Malicious code in sme-rko-finance-front-operations-providers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85709f3e95d677177f1e55976d46cf4e16582e9cf3c1b310a7e67dd09885a743 On require of the package, index.js loads bridge.js which assembles Cloudflare Workers subdomain hostnames from split string fragments...

MAL-2026-13648 Malicious code in sme-rko-finance-front-operations-special-payments (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a7bfbc55631ce8b054b20444bf1e335244c998fcf00d1709f951b1afa4cb242 On require of the package, index.js loads support.js which downloads a platform-specific binary from string-concatenated cloudflare workers.dev...