MAL-2025-1217 Malicious code in example-advanced (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe22841f48a20657900f7b7c76268c6243981bb55e440bc22345c6b8831d42f6 Any computer that has this package installed or running should be considered...

MAL-2025-1230 Malicious code in safe-modules (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8910830c20437fe0cdc2496ec1c70717d8b37ebfb5d3682d94e64492d5265f9d Any computer that has this package installed or running should be considered...

MAL-2025-1222 Malicious code in markdownalint-cli2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f615ed0eb49582f5ed4930017c17f3598a4c92c16cf29edfe4952016fe22210c Any computer that has this package installed or running should be considered...

MAL-2025-1040 Malicious code in ibm.github.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af453f19a328ea28db57d39cc9c120b102b0ba80e4c420727d562290f49d5ec5 Any computer that has this package installed or running should be considered...

MAL-2025-1048 Malicious code in roro3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb3dbafbc69e88d00a072639d1278fe66ea684bc6a2ef54df6e9757000bd82d9 Any computer that has this package installed or running should be considered...

MAL-2025-1235 Malicious code in u-workflow.utils-legacy (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-1205 Malicious code in ad-language-monitor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c1ba5efe213adabcd9ec80e0d1c0c6bb2ccc9d6d22d0646a386f1a23affb0ee Any computer that has this package installed or running should be considered...

Cisco Finds DeepSeek R1 Highly Vulnerable to Harmful Prompts

DeepSeek R1, a cost-efficient AI model, achieves impressive reasoning but fails all safety tests in a new study…...

MAL-2025-719 Malicious code in dummy-loosesight-gd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b81116d25d562a22553f836d8de86b6e893c999b837eab90bafce90180f8dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-734 Malicious code in gitgotgottten (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-747 Malicious code in prajwal_kewat-test-package (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-711 Malicious code in nlohmann-json (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5aa85efabb2331d4495a31e8b8101fb7a0cdd11d7c9a4724b6fbb2a3c60b9296 Any computer that has this package installed or running should be considered...

MAL-2025-704 Malicious code in compiler-version (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73dd1634a0316a2945a7fa0fafbe7bed2c0bb9fc965eb0643686959203542796 Any computer that has this package installed or running should be considered...

MAL-2025-744 Malicious code in jqtools-overlay (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-733 Malicious code in finfonfon (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-715 Malicious code in smartling-openapi-spec (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21a5bc79af548e1ec5706ef28aa4991242b628e7fb312ee2141f58d6aa46d16b Any computer that has this package installed or running should be considered...

MAL-2025-705 Malicious code in css-blocks-monorepo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd8788a6de395289af00ce5d63b51a4609d89ea09f2bf3eb36af0e27234e0fb1 Any computer that has this package installed or running should be considered...

MAL-2025-730 Malicious code in @wongapl/sliders (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-718 Malicious code in wallet-adapter-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41c88a5f680ce3b7a91cc33acc9f9c659a8eda896547804c4745c1b7e3cb91b6 Any computer that has this package installed or running should be considered...

MAL-2025-712 Malicious code in npm-website-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93da080821140bce6e36bb1c02a83b3d84c25e137e7d71595fad19f4a7dc2508 Any computer that has this package installed or running should be considered...