MAL-2025-1037 Malicious code in guests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...

MAL-2025-1212 Malicious code in cth-poc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-1031 Malicious code in cg-be-package (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-727 Malicious code in @wongapl/offer-digest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-681 Malicious code in realtime-from-scratch (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-642 Malicious code in cli-docs-site (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-672 Malicious code in media_kit_native_event_loop (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d4f7b68836068f9cc96c2c5db66c0ad1cbc255e21f525e5069885d7aff5e5f Any computer that has this package installed or running should be considered...

MAL-2025-622 Malicious code in tree-sitter-hcl (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895fc4f8ca15729033448c2a72536b4599d5bfb9fa83bf42bec01c2e4e4fae88 Any computer that has this package installed or running should be considered...

MAL-2025-548 Malicious code in meli-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac505cb26eb829b7873ae3ef5920a2fe35d4627fc36c958e35a24d261e0bc7df The OpenSSF Package Analysis project identified 'meli-checkout' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-418 Malicious code in coinbase-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11f63e2582635c8aaeee457a1c87f71fdd82592004c5724a3447a0d427098c7b The OpenSSF Package Analysis project identified 'coinbase-cloud' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-359 Malicious code in collapsible-group (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a424d4fcd62d35f9e9da962931dbc5fd39e9bfc3b4744a5f00c5e442b2ddb36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12130 Malicious code in nativescript-gainsight-px (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a623f285a8491c50ebbad0ad2a62988fbf68724329f6d7b0a7d30b1bf44ded73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12117 Malicious code in react-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3056b390e6fea55432a197cca0d614e66de98058a3e4b6087a547a66327ee6c5 The OpenSSF Package Analysis project identified 'react-release-manager' @ 1.1.3 npm as malicious. It is considered malicious because: - The...

MAL-2024-12067 Malicious code in aauto-assign-team-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ef1fe2d72d5632ea92996b145c4713780023fe149d21e2f24e5ba190caf8100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11915 Malicious code in ifood2-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a15f07f3dda7d132a00d57e04e31bc1c982857fc28d86ec6934974c3ad314723 The OpenSSF Package Analysis project identified 'ifood2-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11876 Malicious code in web3-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965af70ebf07de371170bda6a257b464ee058430c0f1d6112323bacabbe19d5c The OpenSSF Package Analysis project identified 'web3-docs' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11847 Malicious code in support-conversations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edda50ab2f0ce5968a008967fbb252094f125171a8759dc97957ee5f7d8d8826 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11823 Malicious code in simulation_service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf6c7d5222c0cf39b74d1359864f3ae93cef37354056d3bed6b1d95df61d66a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11780 Malicious code in @aoflmkt/app-call (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ceabbeb0d20f6267c8883498e7c31aa52148eff458969a12d2397d930978d85 The OpenSSF Package Analysis project identified '@aoflmkt/app-call' @ 100.100.106 npm as malicious. It is considered malicious because: - The...

Malicious code in openfermionpyscanf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eb5fef6cf1c79b7e945198aa689490c004a9b1c400642cece5597b6b7b02bf71 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...