1885 matches found
MAL-2025-6258 Malicious code in redux-saga-task-cancel-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdf4f44f0e2251feb64569ec5e6632d61028a3700988bf3e904d2b70ae3955f4 The OpenSSF Package Analysis project identified...
MAL-2025-6255 Malicious code in redux-probe-unknown-action-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d273d8be87dc1aaa71222024d9f545d4ec9bde08234f27b0c9c81f6dd8c86721 The OpenSSF Package Analysis project identified...
MAL-2025-6257 Malicious code in redux-saga-channel-end-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c0fde8502cb19eb266cf53e69e92a54e426d6996f99eefd2c3ecefd5db7cc43 The OpenSSF Package Analysis project identified...
MAL-2025-6251 Malicious code in dva-loading-hide-rce (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 236bea5646a5f41a1a00049315bf89b5d58d75f522e1d1dbc8bbc86d85e10919 The OpenSSF Package Analysis project identified 'dva-loading-hide-rce...
MAL-2025-6249 Malicious code in @grafanacloud/test-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86fad9166303d847c44fd5532ddf9f11a1b00f4d412bdde3435415be2bdd4b5e The OpenSSF Package Analysis project identified...
MAL-2025-6318 Malicious code in testinghs (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9769d7e7fcf228fd4f1667968ced173bd9ba1ea9f2476bd11055f71c461b832 Any computer that has this package installed or running should be considered...
MAL-2025-6307 Malicious code in rns-partner-registrar (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6319 Malicious code in tool-commitizen-adapter-xp (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6266 Malicious code in @teamstelemetry/shared-logger (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6284 Malicious code in events-web (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6289 Malicious code in jsmimeparser (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6241 Malicious code in budoux-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b648f8e2f3161c2d499b10cce27dfd7bc034fc56857168b74c85c0dd29d03fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-6239 Malicious code in scheduler-builtin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9238549a48f542b04214bdd11a30353e38a60a8838caafb36557ef1225cf6fd8 Any computer that has this package installed or running should be considered...
MAL-2025-6238 Malicious code in @googlesitekit/assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24f7823f5a513a40959c5bd9912593b27c89fb7f0d627ed9a66417d0f0707472 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview chime-core-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-6231 Malicious code in bufbuild-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea2a6d8f75509bff2876bce466f00b9c7c810394f46e6479c6e2d8b19acc9557 The OpenSSF Package Analysis project identified 'bufbuild-core' @ 1.0...
MAL-2025-6232 Malicious code in plugin-basic-ssl (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c91f97ac10fa598313b2e03c827655a79a9eb89adf780dbd0df721f49780a8 Any computer that has this package installed or running should be considered...
MAL-2025-6229 Malicious code in airbnb-prop (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8aacf36d756bbb283dfe3340b8b1a4f2e5d7f9d2b0d662eba57f8e675728055e Any computer that has this package installed or running should be considered...
MAL-2025-6228 Malicious code in kalitestbbh (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e73ee538aaefd2dcb0c98564285812c9ac69f9e308fac7b6de60784ebf954a2 Any computer that has this package installed or running should be considered...