MAL-2025-6211 Malicious code in mgzfakee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90b2e8527746aae303a816c6d654f3c6b1d2898ac267657a6fb553577cb0fd0e The OpenSSF Package Analysis project identified 'mgzfakee' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6206 Malicious code in igshared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42c9fa002fd890335fcbf32309ed3d7d078d7ccffd8b3da6c1e2836b5f522db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6207 Malicious code in lscommons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f574fcf984262d226cc642d115840f6dc7f8125d0e7eb498928e341cf50cd6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6208 Malicious code in lspushpage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 342185a365958121f41f62ee23a2f2b7c7351f90a920a5030e30fb566ddb5fd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5840 Malicious code in flow-playground (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d20a3a54d31a33e86fe7ad68eddc9fbfb2b2d94bc3787b6d963b290d2fbdde Any computer that has this package installed or running should be considered...

MAL-2025-6121 Malicious code in realtime-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25e65ca84d64481a7631998dd140a2b8cecaa7b5716bb71dc08ff53e700a10aa The OpenSSF Package Analysis project identified 'realtime-demo' @...

MAL-2025-6107 Malicious code in node-ts-cjs-auto (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6105 Malicious code in model-providers (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bc812776fc9ca2678deabf678d9dae58067e353d0d7131e35d68fa452ff57f5 The OpenSSF Package Analysis project identified 'model-providers' @...

MAL-2025-5838 Malicious code in @0xzyo111/frontend-logger (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ea6fe9c933bc0a4ac656882af6f4662783f92087518dbbb253c351f60d44b63 Any computer that has this package installed or running should be considered...

MAL-2025-6071 Malicious code in agent-patterns (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6094 Malicious code in handoffs (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5837 Malicious code in test-package-avinav (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 db665678ac908b6f9aa76ef069759ebd70b62c901a6f840b765ba7cac299c423 During installation, a heavily obfuscated code is executed. Exact behaviour unclear --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-5836 Malicious code in tw-core-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb17ff1202bd8522ed8a37591dc22da8c39ed2554771c3566b2ac7d4e356f2 Any computer that has this package installed or running should be considered...

MAL-2025-6090 Malicious code in google-fishbones-poc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5832 Malicious code in @pwa-ib/eslint-plugin-compat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d551b7911958e1076f15bbee358feaed7da5b9aea78210268e6e68261822c7a The OpenSSF Package Analysis project identified '@pwa-ib/eslint-plugin-compat' @ 1.99.99 npm as malicious. It is considered malicious because: -...

MAL-2025-5821 Malicious code in preview-server-auth-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5817 Malicious code in os-apps-ui-portal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8498c14ab0839b2246f1a784b82c65d6be3ba1b529fbda90f28429f95c833ce7 The OpenSSF Package Analysis project identified 'os-apps-ui-portal' @...

MAL-2025-5760 Malicious code in @blocks-shared/atom-panel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c591a20fbe6de7639db5ac559fbc7db95960967fb3eb809e6fe2f58943f4a75 The OpenSSF Package Analysis project identified...

MAL-2025-5761 Malicious code in npmrcetest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 741db95105cd1c34f5bd28fc99935de82e252d783d12600ba3f43ecd9c13d07e The OpenSSF Package Analysis project identified 'npmrcetest' @ 1.0.0...

MAL-2025-5759 Malicious code in os-apps-ui-creative-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81c073683277444cc82216b47de3758bb6fc20065d1220076e08d5bd84270ad5 The OpenSSF Package Analysis project identified...