1886 matches found
MAL-2025-5471 Malicious code in uphold-sdk-javascript-extensions (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5436 Malicious code in messaging-client-lite (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5265 Malicious code in agoda.cronos.gql (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0918c4b7cc7549b33d32ef492ce8439108e4df06cece719c5a0e497e048f6293 Any computer that has this package installed or running should be considered...
MAL-2025-5269 Malicious code in fooldependgcbk8x (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40edfccd147dc478664b7c35428ddcc41628c4bd8d11341b39de5092cf1ed958 The OpenSSF Package Analysis project identified 'fooldependgcbk8x' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5268 Malicious code in fooldepend9f218a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d68aea54197ae7455406cdcc725402bd69770cce80a8958ec4d1627b67a2814 The OpenSSF Package Analysis project identified 'fooldepend9f218a' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5218 Malicious code in jridgewell-resolve-uri-latest (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ebc214d374220844dddff1ed8dc339282cd98387925c0d108222a3dc578d430 Any computer that has this package installed or running should be considered...
MAL-2025-5216 Malicious code in strict-csp-builder (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e42c1e63ff88dae30df638aa554602cf21df6606f31d9476c8b00d28881777d5 Any computer that has this package installed or running should be considered...
MAL-2025-5455 Malicious code in red-bull-venue-tools (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5fe5829b1fbc9d863be9bad876998565a13ebc95fecc9ccc5600f92ecd423b package.json declares preinstall=node index.js, which fires automatically ...
MAL-2025-5213 Malicious code in handelsblatt-hypesignals-ui-components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1041cb10e755d31aaf87160a55cd21a723840476f966117b7895256ef06ae13e Any computer that has this package installed or running should be considered...
QGuard:Question-Based Zero-Shot Guard for Multi-Modal LLM Safety
The recent advancements in Large Language ModelsLLMs have had a significant impact on a wide range of fields, from general domains to specialized areas. However, these advancements have also significantly increased the potential for malicious users to exploit harmful and jailbreak prompts for...
MAL-2025-5375 Malicious code in camelcase-v2 (npm)
The package communicates with a domain associated with malicious activity...
SAFEx: Analyzing Vulnerabilities of MoE-Based LLMs Via Stable Safety-Critical Expert Identification
Large language models based on Mixture-of-Experts have achieved substantial gains in efficiency and scalability, yet their architectural uniqueness introduces underexplored safety alignment challenges. Existing safety alignment strategies, predominantly designed for dense models, are ill-suited t...
MAL-2025-5394 Malicious code in dynamic-global-wallet (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5414 Malicious code in hackshack-leaderboard (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5176 Malicious code in tap-bar (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80f415a4d7c9d782ada5f5ee7e58ff393f870157306c8a90d325fcd796825e6c Any computer that has this package installed or running should be considered...
MAL-2025-5175 Malicious code in test-package-vans (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 27c1fc3b6a086e894434a4bb93a7280083831b719de5259c00fa388ac3e4c1f4 The OpenSSF Package Analysis project identified 'test-package-vans' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...
MAL-2025-5410 Malicious code in frontend-tests-demo (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5445 Malicious code in obsi (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5241 Malicious code in taskcluster-db (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 015560a72e308c3ba1770533176ac7fe0bcfbe4892581829992ee47063774f5c Any computer that has this package installed or running should be considered...