1889 matches found
MAL-2025-6713 Malicious code in deno-r4-basic (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6756 Malicious code in reference-library (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6702 Malicious code in build-angular (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6722 Malicious code in external-pkg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6735 Malicious code in library-with-exports (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6683 Malicious code in 7702-eoa-implementation (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6726 Malicious code in hw-transport-node-hid (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6715 Malicious code in edenx (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6350 Malicious code in rca-overlay-panel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e53864a144cd059b57b54e04fbdd4b522e837be90b0cca8354683ef4868f7889 The OpenSSF Package Analysis project identified 'rca-overlay-panel' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6787 Malicious code in flatfox-api (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c1abb243ceb7b5b94ca2f950d7cf27838ad4c22bc9771a0ea878af5497bfebf2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6349 Malicious code in inditextech (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 455c80b36b4b1ba97172a5cd0ebbe04c6b7fd35f405aeaa3d570ae77522dc433 The OpenSSF Package Analysis project identified 'inditextech' @ 10.0.3 npm as malicious. It is considered malicious because: - The package...
MAL-2025-6685 Malicious code in @azet/api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b2841cc52f86348bb048d0fc7dd2dba1253653dd003f68552f72f67ba3953ec The OpenSSF Package Analysis project identified '@azet/api' @ 1.0.0 n...
Malicious Package
Overview real-socket-rt is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-6348 Malicious code in resource_registry (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97ad7e4a2d8c7feaee7f61db0f1f57c90f92b4f92d6ca258fef4bc5f5107666d The OpenSSF Package Analysis project identified 'resourceregistry' @ 1.0.22 rubygems as malicious. It is considered malicious because: - The...
MAL-2025-6337 Malicious code in @xcxcxxx/gsap3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2b40f953bb5a5912e570360e414e6cfa40076203e4625982216196baf98874e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6329 Malicious code in momentjs-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f28c9895f79a0a36ce23a5aa43824f3819d75b0736b6650523b5f4dc6aa0babd The OpenSSF Package Analysis project identified 'momentjs-poc' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious Package
Overview @googlesitekit/assets is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview budoux-extension is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...