MAL-2025-604 Malicious code in intel-enterprise-rag-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30b1b0912b61e57e7e0c1b76442cf9f5894447f876e8098c0efb67c72e1dc52f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-593 Malicious code in testbcms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 992b63c655205db655d1d67e1520392056934475ceef3b2d77371f64618d8fb2 The OpenSSF Package Analysis project identified 'testbcms' @ 1.3.8 npm as malicious. It is considered malicious because: - The package...

MAL-2025-592 Malicious code in kuvvet_poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a15f57daa0dfb5fe047124342523add2a4d20eebd28713661823ae555930135 The OpenSSF Package Analysis project identified 'kuvvetpoc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-590 Malicious code in sandstorm-widgets-nyse-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 521032aa86f84d6ee0bb3ad2b7b97e43683ed2040212f5b7cb5359f10549fea6 The OpenSSF Package Analysis project identified 'sandstorm-widgets-nyse-website' @ 7.0.1 npm as malicious. It is considered malicious because: -...

MAL-2025-589 Malicious code in dummy-loosesight-gc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f78553519ec74b4ac5b242e553f94941b613be837aafdbfebf10f45f36dbdad5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-588 Malicious code in @adsk-forks/jsonpath (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b3b2039104a753b08abe81f7754ff405d8e3206c92b7251c857b28e3431fdc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-587 Malicious code in swift-login-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbad853440515e1762a39bb7b7d5a115b77cf243fd0ee0b3bbd82c1ac8bab0c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-586 Malicious code in test-test-121333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ed3e1b0420eb26040693b16a06bc6803942f127119fd8cf4082268891ea0db5f The OpenSSF Package Analysis project identified 'test-test-121333' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2025-584 Malicious code in pascoresend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eb745bf1dd58bd41204dc547be9cadb3cbe35b5d804c45735c78cf6c33fe4ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-563 Malicious code in meli-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c7d0ea07d51fa1a590737fa0586578db983b776c21cb15f0597463d7046dea8 The OpenSSF Package Analysis project identified 'meli-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-560 Malicious code in lyft-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcca40856d5632be95c3559613e9df39dfaacc71fb02c8004abd5dd44714670a The OpenSSF Package Analysis project identified 'lyft-database' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-564 Malicious code in meli-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 793bfcfb95a79b8cd268833db69c5dc0bc95766ce7acef8947614e19d8e27afc The OpenSSF Package Analysis project identified 'meli-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-561 Malicious code in lyft-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58c0d486a0a319a7ba6fbad3e5c15fe0bbf6966cac7c5a7f3ebee46c2c7f8bb7 The OpenSSF Package Analysis project identified 'lyft-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-541 Malicious code in lyft-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b2c00234e034299caca80e55a0e1850002d9a55938aa217a50b0a39620bfc14 The OpenSSF Package Analysis project identified 'lyft-tools' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-544 Malicious code in meli-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb28bf7bab07e7d8ce966bd32c13cf1917b50adade7a33b66bb6e39c74710827 The OpenSSF Package Analysis project identified 'meli-analytics' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-542 Malicious code in lyft-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2f01e05b592462f5cd8959f49eb75aea1f7e08d9c9c2a1e817953e0c06e3c84 The OpenSSF Package Analysis project identified 'lyft-user' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-539 Malicious code in lyft-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-556 Malicious code in meli-jira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a520cbe50d8535849ba1e07a7b87c326e1b5d72851d82b62dc215ebd3634646a The OpenSSF Package Analysis project identified 'meli-jira' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-553 Malicious code in meli-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52e53ccc9088219b5062b6ceac1a6d716fc2700eb4110e523cf08592c472d78e The OpenSSF Package Analysis project identified 'meli-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-549 Malicious code in meli-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2e755994fef555f630bf43ead9cc9c83f1927fd069d0c46c98253436d5e674c The OpenSSF Package Analysis project identified 'meli-cloud' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...