1886 matches found
MAL-2025-1219 Malicious code in hosted-wallet-page (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ede0235fd9b473e8e196c7b36ea76c1a910d85843bf453363798303f16b05625 Any computer that has this package installed or running should be considered...
MAL-2025-1213 Malicious code in cxf-plugins (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-1231 Malicious code in sjzxy (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-1018 Malicious code in apple-user (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8912d51500c8587f94c4a95668a15c6225ed1285c96f5daa159488cdcffd77 Any computer that has this package installed or running should be considered...
Cisco Finds DeepSeek R1 Highly Vulnerable to Harmful Prompts
DeepSeek R1, a cost-efficient AI model, achieves impressive reasoning but fails all safety tests in a new study…...
MAL-2025-719 Malicious code in dummy-loosesight-gd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b81116d25d562a22553f836d8de86b6e893c999b837eab90bafce90180f8dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-728 Malicious code in @wongapl/offer-selector (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in k6-learn (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16bc5803188467cda4dd1fe959c79f45cecd30451f206ab0dd7d318ebcf62ac3 Any computer that has this package installed or running should be considered...
MAL-2025-714 Malicious code in qiot (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3059320d7f7fe85fa1c9a9b6ab7e8ee74f13c6994b93f055fd27db8fbdf7b468 Any computer that has this package installed or running should be considered...
MAL-2025-701 Malicious code in browser-nextjs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a391b07d3a459e7dd200191edde3d936f11a865bcecc3ac54f1210b905ee6c Any computer that has this package installed or running should be considered...
MAL-2025-744 Malicious code in jqtools-overlay (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-718 Malicious code in wallet-adapter-demo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...
MAL-2025-733 Malicious code in finfonfon (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-732 Malicious code in elabasia-mobileapp-react-native-ui (npm)
The package executes harmful command in pre-installation script to send sensitive data to an arbitrary domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba40a9eda5717392c99efe0516b4a42a0606f1f80cfa4f4887aa56fd0a4eaf93 Any computer that has this package install...
MAL-2025-727 Malicious code in @wongapl/offer-digest (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-746 Malicious code in offer-ui-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-729 Malicious code in @wongapl/offer-ui-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-709 Malicious code in magic-enum (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 598b85d2cd40d3abeef6fd8285d482735da83dc1711554425a6923673d7698e6 Any computer that has this package installed or running should be considered...
MAL-2025-705 Malicious code in css-blocks-monorepo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd8788a6de395289af00ce5d63b51a4609d89ea09f2bf3eb36af0e27234e0fb1 Any computer that has this package installed or running should be considered...