1889 matches found
MAL-2025-6780 Malicious code in wbcm (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6686 Malicious code in @cwlib/core (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6766 Malicious code in tdesign-flutter (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6773 Malicious code in trigger-dev-logger (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6729 Malicious code in internal-logger-embaby (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6720 Malicious code in ethical-ping-example (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6763 Malicious code in spot-tasks (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6760 Malicious code in sirius-import-article (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6742 Malicious code in node-sqlite-fly-tutorial (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6744 Malicious code in nova-ssr-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6743 Malicious code in nova-node-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6754 Malicious code in react-native-at-internet-example (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6761 Malicious code in slack-astra-app (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6771 Malicious code in tidb-lightning-web (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6747 Malicious code in onboarding-lemonde (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6328 Malicious code in triple-equals (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d65cc69dec9f320438a4209e4c952480d78b96c779a019b6a09c04499b9e3edc When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...
Malicious Package
Overview dndattachment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-6265 Malicious code in message_gateway (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2781d258b292d5959839a52e0e940040defaae1ecbb1293c0d149dc5f6faf110 The OpenSSF Package Analysis project identified 'messagegateway' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The packag...