EUVD-2023-32652

Malicious code in bioql PyPI...

MAL-2025-47900 Malicious code in kss-node-handlebars-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca63cd37e035f2a065952377f5c8b77ac950f443c2ac3233ead4b6203f62d9c The OpenSSF Package Analysis project identified 'kss-node-handlebars-builder' @ 9.0.1 npm as malicious. It is considered malicious because: - Th...

MAL-2025-47817 Malicious code in rsi-configuration-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a9a3e53f5018108f5ce8abbccd7313ccac30e61c7985e5d7d90291c30299957 The OpenSSF Package Analysis project identified 'rsi-configuration-module' @ 1.1.2 npm as malicious. It is considered malicious because: - The...

Malicious code in actions-run-service (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0096c4c86f75bd5815b589d90393b9d5efa12ac9fdae99a2cb6293475de0cbf8 The OpenSSF Package Analysis project identified 'actions-run-service' @ 0.0.1.r2301dc6 rubygems as malicious. It is considered malicious because...

MAL-2025-41811 Malicious code in focusnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 329b5776b274f7d9c05a5fe2ce4489b2786e18f0b71b95385dfd7a0539ceb7f5 The OpenSSF Package Analysis project identified 'focusnode' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in ambmock.sol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3325e3e3e4d5da75f9755d2ad28d8e50b9339069afd9e0ed75cfcee080e3eed The OpenSSF Package Analysis project identified 'ambmock.sol' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in typescript-6.0 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0cd1eb2749ce618a7dbf198dab8918ade0798770a8b15d51e27738bd05f3cd0 The OpenSSF Package Analysis project identified 'typescript-6.0' @...

Malicious code in temp-nextjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfe72049bd612f29f827f8066a860bf194d84a26a428ae527df672b1428c39b The OpenSSF Package Analysis project identified 'temp-nextjs' @ 99.0....

Malicious code in run-scenarios-helpers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 643959f3bad134aeb7e2e5ea40f5f4c01cb16fc0ef02238b81d5f5ee1ef42970 The OpenSSF Package Analysis project identified 'run-scenarios-helper...

Malicious code in heft-storybook-react-tutorial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aaa15f8740a436b59266355d59bb470dfd605d6260dc307a40ef50e20f65939 The OpenSSF Package Analysis project identified 'heft-storybook-react-tutorial' @ 99.0.9 npm as malicious. It is considered malicious because: -...

Malicious code in image-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d039c00b9a8017cedcf0b37cf3a3497b17065bfff2570e247e7245fd2f6b5a4f The OpenSSF Package Analysis project identified 'image-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in ledger-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 213b191babc7191e43f7c5440581518cecd61302d3870b5fbbe6f20266b8e9cf The OpenSSF Package Analysis project identified 'ledger-provider' @ 1337.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6677 Malicious code in undeface-test-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5d434f28a3308a27549e2074866ae549681568f517ab1c783d210924f5d827f0 The OpenSSF Package Analysis project identified 'undeface-test-3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6383 Malicious code in bullyshitty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af65e362c6eb3c7a952647d9fdc470881bfe8af8cd609b1c8deffe3a0ea7ff8c The OpenSSF Package Analysis project identified 'bullyshitty' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6384 Malicious code in openai-tsp (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9afad0907413b0e88664cb893d34b71ad10d4a15def77275bc4a654bb21dd7a8 The OpenSSF Package Analysis project identified 'openai-tsp' @ 16.1.0...

MAL-2025-6787 Malicious code in flatfox-api (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c1abb243ceb7b5b94ca2f950d7cf27838ad4c22bc9771a0ea878af5497bfebf2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6265 Malicious code in message_gateway (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2781d258b292d5959839a52e0e940040defaae1ecbb1293c0d149dc5f6faf110 The OpenSSF Package Analysis project identified 'messagegateway' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The packag...

MAL-2025-6264 Malicious code in hast-util-to-babel-ast (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 55816d77f51cc9fc5c5fc18491df2693e7be82d2c4865402a52a85af9f685300 The OpenSSF Package Analysis project identified...

MAL-2025-6249 Malicious code in @grafanacloud/test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86fad9166303d847c44fd5532ddf9f11a1b00f4d412bdde3435415be2bdd4b5e The OpenSSF Package Analysis project identified...

MAL-2025-6213 Malicious code in donotinstallthisistest6 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 272225f1adba5810796fd9c194041e72e5fcdcc032fa296a701bcc480b37bfcb Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...