MAL-2025-1528 Malicious code in wdpr-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa07fe623ed4f4dd2faf6053e7bdf936f13e8e3ee0dd7ffcc9af37cc778eef8c The OpenSSF Package Analysis project identified 'wdpr-test-package' @ 999.999.999 npm as malicious. It is considered malicious because: - The...

MAL-2025-1509 Malicious code in wasm-test-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babc522f7d7785ae4fbf04d28f89e4db9b46fbec0308879dad88b4b27542f1bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1508 Malicious code in komojuu (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c9b92c44ca626e6347b7268f60a919598a96b7b49491c0e2eed6b9d7f0d3ab73 The OpenSSF Package Analysis project identified 'komojuu' @ 99.0.0 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-1507 Malicious code in myconfusedfunctionpoctestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bb8885e6f11e787f3b0b6d58c7b08bcaa2c52c25609aa5728f9e7c4a323eaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1506 Malicious code in mygcpconfusedfunctionpoctestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d791e46a1741fda065be23dc9ee80e6237ac32eeee9718c46c2f50070d84c30f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1505 Malicious code in storyblok-rich-text-astro-renderer-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca413e5e4f59154a8de4096af868e37c16b2b9df85e5e20a341283c83e7b1db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2345 Malicious code in mstplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 48409bd7f3f22c084f0f0269402f93d8327e3d8d89edf03641e8093e0b22938c This package is a typosquat of the matplotlib package and executes harmful code during installation. It appears to inject code into Python files...

MAL-2025-1473 Malicious code in @roku-web-ui/modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 512ba24a101785e7291eb757bbfc4432a141e965e32387d27725783342116e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1472 Malicious code in @supera/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49646b06c192dbf0af2ad637e18b135b9b07b4d33bf270720fb46c6037d47f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1471 Malicious code in wkndaemassetcompute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c407d8af3732f19844c82d8ebb0b97754b59b979b9db2ec82f002e136ca1486f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1469 Malicious code in elastic-buildkite-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 889d976fe581d0e221dc91fb52cc010669d68189ba293e437a6966b6decd515f The OpenSSF Package Analysis project identified 'elastic-buildkite-manager' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-1467 Malicious code in @xenial-ux/services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44606337fc107c8d2c2199016ea7ec9f79003aa4ebd99f43cef39e8c272ec0af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1466 Malicious code in testapi1232 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c8a659ea91462b16b2bb775d50961512a19bdd87a76f49677e378929e0a329d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1465 Malicious code in ing-open-banking-cli-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e671918afbc4f855be4bae3831f2a5b173f03949b1c9de394cf545a13027863e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1464 Malicious code in archon7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f53d83b877f02c6e6b51cad5ccf4940a0e19e8e9aeda69d9a9d013ca471bd64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1462 Malicious code in ab-typescript-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dff357f39e4f6c3cdfa2b8e8ef8d23e3b77159f31f825545ce19fd8a9150f869 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1461 Malicious code in archon5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f96513d49b650de14afd8f58eb7a9af6e3f48e3af96d2fff186b24b49aa28d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1460 Malicious code in archon3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f41e5d885f763c61c81992425c2af8b214f779099c56d091fa0c938e713b44b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1459 Malicious code in archon2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2efbecb91840f3bd10abd707ee59f45fc25c310b59477444324c0d40c7e128bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1389 Malicious code in linter-coffee-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 292d0ff0a104c6e415fc2ea734ec189f699d6aecb4383502759e2053adddfb45 The OpenSSF Package Analysis project identified 'linter-coffee-variables' @ 1.0.0 npm as malicious. It is considered malicious because: - The...