1886 matches found
MAL-2025-5294 Malicious code in validate-rb (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7975ebc737a4c604d0d25ee00a187fde74d2442953ec305c57c738ebd4cdedcd The OpenSSF Package Analysis project identified 'validate-rb' @ 1.0.0...
MAL-2025-5293 Malicious code in retaillocationserv-paypal (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0409d54039e50835f5e9986281184dc84f53f8c20c6a838505fcd8097c538feb The OpenSSF Package Analysis project identified...
MAL-2025-5292 Malicious code in mercadolibre-prueba-front (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e618c15b2fe0ed57d70ce007a41fcc579a49559db036719367d16367c00dc258 The OpenSSF Package Analysis project identified...
MAL-2025-5465 Malicious code in tableau-widgets-datagrid (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5464 Malicious code in tableau-vizportal-webclient-api (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5291 Malicious code in defectdojosw (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93d614c0d808786b112774fdec4eb2b8afecef6ec8de82e4945bdc644e5023c4 The OpenSSF Package Analysis project identified 'defectdojosw' @ 10.1.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5362 Malicious code in aquasec-orb-test-project (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5450 Malicious code in phantom-sign-in-with-solana (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fb04ee07048a7f2aa9201a7f29e3d8bb5802fb53f095bc48f93928568cf4646 Any computer that has this package installed or running should be considered...
MAL-2025-5279 Malicious code in phantom-labs-sandbox (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd1e98be0b346737740a6114c37dc7dd21cd328f21d026e07d9eb0348e43464 Any computer that has this package installed or running should be considered...
MAL-2025-5419 Malicious code in intercom-intercom-embed (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5420 Malicious code in intercom-intermoji (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5421 Malicious code in intercom-pulse (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5277 Malicious code in robinhood-internal-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5350c4af558b6036e996982e7ac060be1ac0516b91dfd7b983a5c0b5d76270ec The OpenSSF Package Analysis project identified...
MAL-2025-5312 Malicious code in nordic-dev-ts (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1745e8aa07b56cf04bc594aa60fb250b98666d7c3c65514c610e4e55b39ec70f Any computer that has this package installed or running should be considered...
MAL-2025-5309 Malicious code in meli-ai-chat-library (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fe9cef75ee52e8b6473470f69a31b8e7057f0fb632c88b89af63c14484d1c13 Any computer that has this package installed or running should be considered...
MAL-2025-5363 Malicious code in astro-island (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-5331 Malicious code in undeconf (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 513c9e34a7d02530bdb34fc364d7c5411914263c5960f4a4cc7fa967c3c01f36 Any computer that has this package installed or running should be considered...
MAL-2025-5272 Malicious code in netbsd-x64 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e073f169f275d0d59453b46c67c75274841817b47079b22d5dff4fb7aba1d7c6 The OpenSSF Package Analysis project identified 'netbsd-x64' @ 0.24.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5274 Malicious code in testetedep (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20ba1fe5405430542f5bc80c76eed797af680bbe6ccc3df0ddefbb7a8ebaeab4 Any computer that has this package installed or running should be considered...