MAL-2025-6729 Malicious code in internal-logger-embaby (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6720 Malicious code in ethical-ping-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6763 Malicious code in spot-tasks (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6760 Malicious code in sirius-import-article (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6742 Malicious code in node-sqlite-fly-tutorial (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6744 Malicious code in nova-ssr-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6743 Malicious code in nova-node-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6754 Malicious code in react-native-at-internet-example (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6761 Malicious code in slack-astra-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6771 Malicious code in tidb-lightning-web (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6747 Malicious code in onboarding-lemonde (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6328 Malicious code in triple-equals (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d65cc69dec9f320438a4209e4c952480d78b96c779a019b6a09c04499b9e3edc When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...

Malicious Package

Overview dndattachment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-6265 Malicious code in message_gateway (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2781d258b292d5959839a52e0e940040defaae1ecbb1293c0d149dc5f6faf110 The OpenSSF Package Analysis project identified 'messagegateway' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The packag...

MAL-2025-6272 Malicious code in acronis-platform-configs (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6320 Malicious code in turborepo-tests-helpers (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6264 Malicious code in hast-util-to-babel-ast (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 55816d77f51cc9fc5c5fc18491df2693e7be82d2c4865402a52a85af9f685300 The OpenSSF Package Analysis project identified...

MAL-2025-6263 Malicious code in package-with-conditions (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f084cb6652819e6611585205ff40b4194ebfbedb7d9a43aaaf29f0c4ac8e8828 Any computer that has this package installed or running should be considered...

Malicious code in prysk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80bd771f9c6b2d96fa94413e45d0d2ddeb084b6ea58d6b3a7430624821398409 The OpenSSF Package Analysis project identified 'prysk' @ 10.0.1 npm ...

MAL-2025-6259 Malicious code in fuzzponent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c090409f91fd478642c58e1c30b8fc667878e0128355fb88448e4ebed4d8aa9 Any computer that has this package installed or running should be considered...