MAL-2025-5064 Malicious code in vas_extension (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-5009 Malicious code in o11y-ds-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fca3e674d984eeb8be380f95b3033584360c55efdc438f8f43c521b0d7239f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5007 Malicious code in reoregistration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 78444474811c971e219548f0c559d06bef5a4e4cb65703c5ad604ce64f3d0a4d The OpenSSF Package Analysis project identified 'reoregistration' @...

MAL-2025-5004 Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

MAL-2025-5002 Malicious code in studiospanelopsweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39109af2544b22484679e1ee9e8dccfc530166cbf409082b00c9ac4973669e46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5172 Malicious code in idse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 869cc34e50a9769a40adaa64071f9f2d1b86bd17671c26b2a790d2b72089dddf The OpenSSF Package Analysis project identified 'idse' @ 1.0.10 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2025-5173 Malicious code in myatt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 642dc644bf145b2ed3bb5126b58d897d06442693fcfb6747ea553b87ab935bc3 The OpenSSF Package Analysis project identified 'myatt' @ 1.0.10 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2025-4992 Malicious code in just-config-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f014f07f8a3583cf07008dc133b2276390b17d34f6eae237b48210437247544 The OpenSSF Package Analysis project identified 'just-config-data' @ 0.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-5036 Malicious code in kenzup-react-native-rsa-native (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32d4c1032d395b390f908592fd2d12e60419f92e0000d0ff3135829a3db19287 Any computer that has this package installed or running should be considered...

MAL-2025-4999 Malicious code in eslint-plugin-panel-ops (npm)

Malware: Executes code on install, exfiltrates data via DNS to a suspicious domain. Contains a preinstall script and phone-home behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc1ea7508e63005e73356cfdb457f0050ebb7ae1f04cb319592c30a140c4e2f2 Any computer th...

CVE-2025-6170

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

MAL-2025-4981 Malicious code in vscode-spring-initializr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eade5f13d9d6cf7678dfdf2bac67cfc29db071d6d1682cc6b3aadeac7561e30f Any computer that has this package installed or running should be considered...

MAL-2025-4980 Malicious code in raise-http-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec0703ba285b347d94b33a68fa9cf671e9118ede49585fc79f8716d46574e04a Any computer that has this package installed or running should be considered...

MAL-2025-5067 Malicious code in wasm-wasi-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 320ad464f0780881fe134c1e9990c2e1a180a2ab4b6b103e26439d8861709021 Any computer that has this package installed or running should be considered...

MAL-2025-4974 Malicious code in pipet-code-agent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 848b7a72d8d85ada52bafd17d3a0a4550d76cdaa38138f368599a1d0a16c6358 Any computer that has this package installed or running should be considered...

MAL-2025-4971 Malicious code in @glofe/bootstrap (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 695277150d0aac29d1df54911ddf4b154868bbf46e00fb43e8e8d6e251793156 The OpenSSF Package Analysis project identified '@glofe/bootstrap' @...

MAL-2025-4973 Malicious code in juno-autodiscovery-browser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41d44749dbef196f862f8cab350ac18340a99385cbe96ecb2c13a1eed2603d99 The OpenSSF Package Analysis project identified...

MAL-2025-4972 Malicious code in @glofe/company (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c5480bb5f834f28a3384d3dffa6cc27aa4b9b774a690fb81004ca419c69e0db The OpenSSF Package Analysis project identified '@glofe/company' @...

MAL-2025-6644 Malicious code in pakumaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 900b8179fb7ecc8121b77921a5a6c394547bd506367aed2bc638dbc82985396e The OpenSSF Package Analysis project identified 'pakumaku' @ 9.9.9 npm as malicious. It is considered malicious because: - The package executes...

MAL-2025-4968 Malicious code in zoralabs-mintflow-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1dea74f24050807f2f9e6e3d33c631a3ac6e2a8e0c2df829ccb6c8362d0c46b Any computer that has this package installed or running should be considered...