MAL-2025-1388 Malicious code in zmcrypty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee24745300aa11ed0e92813032e7269a17e9c66f73b03ac3e38e6bd613268e1c The OpenSSF Package Analysis project identified 'zmcrypty' @ 66.6.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-1387 Malicious code in tesdf45454t (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bab99ac2b3599508ec9355c7499892e486ae8d8d433fa04e1da03449d7e0993 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1390 Malicious code in suvauxlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5b9068f18c537a559453b7350d3d2a6fc61ea7a7988f11236ee6909550a41b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1391 Malicious code in voiceedgelite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fd93b14a943a875efb1d2602d31cc497e92f135adac765f65f2a0ffd72d6ad42 The OpenSSF Package Analysis project identified 'voiceedgelite' @ 1.1.5 npm as malicious. It is considered malicious because: - The package...

MAL-2025-1385 Malicious code in uyurettrtrtst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f69974d01d68b2e9cd5e64fdd40891f5a03977026f82ced386274cf20c966e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1384 Malicious code in multirpc-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca7a6b77df58901f3ac2f877998ea1904e3eb1178b8a90ebac3cfd990247f90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rust-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f080c05d4a8b07c42704d1ef9fb6f6d30d4128e3f5976f6645a3b8858cb10580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1383 Malicious code in rust-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f080c05d4a8b07c42704d1ef9fb6f6d30d4128e3f5976f6645a3b8858cb10580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1266 Malicious code in vue-search-ui-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eba39e62ce67a90fdd330c95bec218d75c2ddbb0e16d24625081c96a115a046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1239 Malicious code in vhx-node-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97a8bc9059906dee3aacb8bfb00ab219e1fb0cc948a15b861d2455a4a36ec006 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1238 Malicious code in hcpss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544fee49e2faae06ce667fd2b9512d17da30686b4bfe050c4bd76c2d06166fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-5829

Name of the Vulnerable Software and Affected Versions Trimble Cityworks versions prior to 15.8.9 Trimble Cityworks with office companion versions prior to 23.10 Description A deserialization vulnerability could allow an authenticated user to perform a remote code execution attack against a...

Malicious code in codat (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c8bc93392923ec301316878a16827003a0537d4e42cdf3daabf1dc2c16cfd5f Any computer that has this package installed or running should be considered...

MAL-2025-1230 Malicious code in safe-modules (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8910830c20437fe0cdc2496ec1c70717d8b37ebfb5d3682d94e64492d5265f9d Any computer that has this package installed or running should be considered...

MAL-2025-1218 Malicious code in fitbit-widget-dropdown (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-1048 Malicious code in roro3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb3dbafbc69e88d00a072639d1278fe66ea684bc6a2ef54df6e9757000bd82d9 Any computer that has this package installed or running should be considered...

MAL-2025-1026 Malicious code in bookingcom-admin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9d072477020f7c118d12abd0f6a95b217ba0f4b34a64fd4b527722d51c87cef Any computer that has this package installed or running should be considered...

MAL-2025-1215 Malicious code in drift-v1-cli (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc8e83d9fff21b8fd67210fa3db37e1aec46e02dc3da9b43ebbc8ce199d20723 Any computer that has this package installed or running should be considered...

MAL-2025-1202 Malicious code in @devstack-angular/jdai (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac06a10b7b09cb556a876d7b76ede19361cf8c7fb2b92fe70daf3f55cc180dd2 Any computer that has this package installed or running should be considered...

MAL-2025-1037 Malicious code in guests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...