MAL-2025-5291 Malicious code in defectdojosw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93d614c0d808786b112774fdec4eb2b8afecef6ec8de82e4945bdc644e5023c4 The OpenSSF Package Analysis project identified 'defectdojosw' @ 10.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3864 Malicious code in yamoney-guidelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b70971cf40ad70b7bc7610b7db4903284da0bf3b36c7877d50385f6aa73cbf4a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3702 Malicious code in @cewe-phoenix-themes/default-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fefa5fe5221477fe4ca130e84721255986e7b048f3e5922c99cac89d94df83 The OpenSSF Package Analysis project identified '@cewe-phoenix-themes/default-theme' @ 99.9.1 npm as malicious. It is considered malicious...

MAL-2025-3511 Malicious code in test-kaks3c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 591289fef82efe1b6a54e8948561a76e1e42addd4e1b62fe61364c894640b6b9 The OpenSSF Package Analysis project identified 'test-kaks3c' @ 10.0.4 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2606 Malicious code in tec-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2ef98a8d8e55d815b7f3d3955fb72a5387e95a9f22ab1702df9d88b2c152a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2543 Malicious code in azure-rest-api-specs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9b45f4b5db07c14af82f92638c97d70419c7936860274a00dbea1e18db0b58f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2204 Malicious code in depx-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69e0a710cd2cb5b4880fae8eb37ba76afea9f442c898ab7e528965336f75392 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2072 Malicious code in ddataflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e3628188472d3921b31929497ffb10a64fe2632cd81d96c68d5eafa7b7cf18d The OpenSSF Package Analysis project identified 'ddataflow' @ 3.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2058 Malicious code in buttonfactoryserv-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 158238f70853c391431a3c0e3b53d79d44970a0d956562c88324b2c1da5e08e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1675 Malicious code in azure-boards-estimate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5462c61b481e30b0b6520e0b577f7617782f0e214162c66ab8adbe0c21dfbcb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1674 Malicious code in grafana-metricsdrilldown-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f0bf52430819b26f7b4042daedcdd27b0b6dcc7278385dac6989be16b987de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1670 Malicious code in snap-design-system-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bad4c0b89835a8fe7ca332902590a3ace5d2889d12e2d3cde10ee5dc5c695d54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1664 Malicious code in ad-creative-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4976ed17af1930b3c8e965b09664d5243a6cfe6bfa46e841964001beb48fb316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1662 Malicious code in sip.js-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc79a8a90b9e2756012e6ea436db1bc15c17b4596bcedc556ce70cfd8800d99c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1511 Malicious code in spacelift-webhook-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bb9dc87c1669be92bee0be50a372fb87d1d92064bc4db257131d4323c2783e9 The OpenSSF Package Analysis project identified 'spacelift-webhook-receiver' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-1391 Malicious code in voiceedgelite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fd93b14a943a875efb1d2602d31cc497e92f135adac765f65f2a0ffd72d6ad42 The OpenSSF Package Analysis project identified 'voiceedgelite' @ 1.1.5 npm as malicious. It is considered malicious because: - The package...

MAL-2025-455 Malicious code in epicagames-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c33c517ccf715e4f610939332c3137b5abb5a7fbd5c82bac72bf051316389738 The OpenSSF Package Analysis project identified 'epicagames-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-426 Malicious code in coinbase-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0741c99359ea17cdde23087b89cf2a7443d9a2b4a7b2d274dbf78d38c71e6d9 The OpenSSF Package Analysis project identified 'coinbase-tests' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-420 Malicious code in coinbase-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5ca839941ed94b22736187227b12ba68ef04a39c55e4155add495e004d8ed43 The OpenSSF Package Analysis project identified 'coinbase-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-413 Malicious code in coinbase-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1eca83ec9ae75b7f56bdafe8c1f050ea1997c9dfb4a97d02bbf14980917d009e The OpenSSF Package Analysis project identified 'coinbase-admin' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...