MAL-2025-6062 Malicious code in @toptal/picasso-shared (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6065 Malicious code in @toptal/picasso-tailwind (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6052 Malicious code in @toptal/picasso-lab (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6043 Malicious code in @toptal/picasso-charts (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6037 Malicious code in @toptal/davinci-monorepo (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6038 Malicious code in @toptal/picasso (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6010 Malicious code in ruamel-poc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1381375ccfff8dc10b3416284ac4a9a91c69bb2d5e7b652a2df24a64f4c5d512 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6099 Malicious code in ipp-auth-service-tools (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b42b5695779161ac5d3618b146cd263b9f17a9c1fe517abd5efff7b3ecdc97 Any computer that has this package installed or running should be considered...

MAL-2025-6133 Malicious code in uid2-ssportal (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6009 Malicious code in protolab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 395ceb17d3bf331597e101e685532b4af1d732b5ee31005221b0fcae61b97632 The OpenSSF Package Analysis project identified 'protolab' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6008 Malicious code in os-apps-ui-curvelibrary1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d69bf54e33d46b564e56a260b65d3c9b8d3a7202dfec0feb06e2930c0bc53dce The OpenSSF Package Analysis project identified 'os-apps-ui-curvelibrary1' @ 12.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-6007 Malicious code in groq-mcp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f310f1669db9ce74e36d92085a6a67098f7c0ee086d8da5998b709d565a3fe12 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6006 Malicious code in everestsystems-content-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1e36c55069fe1374c19441b5e3cbabd0ba1bc120d2d1651dd5570157a8a9c57 The OpenSSF Package Analysis project identified...

Malicious code in noya-vaults (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c04ef9aa2ad40a3e1dacb5babc831a84e76560f5eddec262e912da4087187a49 The OpenSSF Package Analysis project identified 'noya-vaults' @ 1.0.1...

MAL-2025-6005 Malicious code in noya-vaults (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c04ef9aa2ad40a3e1dacb5babc831a84e76560f5eddec262e912da4087187a49 The OpenSSF Package Analysis project identified 'noya-vaults' @ 1.0.1...

MAL-2025-5995 Malicious code in dascxcxcxcxcxcxxc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b679a7ed981cd77671778267b213920e462f2f9e5ae49ba61967779efb331aa The OpenSSF Package Analysis project identified 'dascxcxcxcxcxcxxc' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6034 Malicious code in @secsol5g/qlik-sense (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e6e893d70e9cadaa903bd52251f94e0ad33fa06117a157e4fe4fe513a8224f1 Any computer that has this package installed or running should be considered...

MAL-2025-6132 Malicious code in ts-browser-webpack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d8417c8eb33f6d78a0b4c28cf081096fc75806bc0795e4327cc6792414ee266 The OpenSSF Package Analysis project identified 'ts-browser-webpack' ...

MAL-2025-6108 Malicious code in node-ts-esm-auto (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-5992 Malicious code in ngx-satoris (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 673e3bc6e9e3b3d52385697990c722fc2d418dcb3169950ac1063ae5b0371c1f Any computer that has this package installed or running should be considered...