MAL-2025-5004 Malicious code in @ftapi/components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 465d533e4d5739006fe746ab80f7ca366926e9c7fa2a5d063a1a2c6a2b1cfb9c The OpenSSF Package Analysis project identified '@ftapi/components' @...

MAL-2025-5002 Malicious code in studiospanelopsweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39109af2544b22484679e1ee9e8dccfc530166cbf409082b00c9ac4973669e46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5172 Malicious code in idse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 869cc34e50a9769a40adaa64071f9f2d1b86bd17671c26b2a790d2b72089dddf The OpenSSF Package Analysis project identified 'idse' @ 1.0.10 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2025-5173 Malicious code in myatt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 642dc644bf145b2ed3bb5126b58d897d06442693fcfb6747ea553b87ab935bc3 The OpenSSF Package Analysis project identified 'myatt' @ 1.0.10 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2025-4992 Malicious code in just-config-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f014f07f8a3583cf07008dc133b2276390b17d34f6eae237b48210437247544 The OpenSSF Package Analysis project identified 'just-config-data' @ 0.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-5036 Malicious code in kenzup-react-native-rsa-native (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32d4c1032d395b390f908592fd2d12e60419f92e0000d0ff3135829a3db19287 Any computer that has this package installed or running should be considered...

MAL-2025-4999 Malicious code in eslint-plugin-panel-ops (npm)

Malware: Executes code on install, exfiltrates data via DNS to a suspicious domain. Contains a preinstall script and phone-home behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc1ea7508e63005e73356cfdb457f0050ebb7ae1f04cb319592c30a140c4e2f2 Any computer th...

CVE-2025-6170

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare...

MAL-2025-4981 Malicious code in vscode-spring-initializr (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eade5f13d9d6cf7678dfdf2bac67cfc29db071d6d1682cc6b3aadeac7561e30f Any computer that has this package installed or running should be considered...

MAL-2025-4980 Malicious code in raise-http-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec0703ba285b347d94b33a68fa9cf671e9118ede49585fc79f8716d46574e04a Any computer that has this package installed or running should be considered...

MAL-2025-5067 Malicious code in wasm-wasi-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 320ad464f0780881fe134c1e9990c2e1a180a2ab4b6b103e26439d8861709021 Any computer that has this package installed or running should be considered...

MAL-2025-4974 Malicious code in pipet-code-agent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 848b7a72d8d85ada52bafd17d3a0a4550d76cdaa38138f368599a1d0a16c6358 Any computer that has this package installed or running should be considered...

MAL-2025-4971 Malicious code in @glofe/bootstrap (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 695277150d0aac29d1df54911ddf4b154868bbf46e00fb43e8e8d6e251793156 The OpenSSF Package Analysis project identified '@glofe/bootstrap' @...

MAL-2025-4973 Malicious code in juno-autodiscovery-browser (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41d44749dbef196f862f8cab350ac18340a99385cbe96ecb2c13a1eed2603d99 The OpenSSF Package Analysis project identified...

MAL-2025-4972 Malicious code in @glofe/company (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c5480bb5f834f28a3384d3dffa6cc27aa4b9b774a690fb81004ca419c69e0db The OpenSSF Package Analysis project identified '@glofe/company' @...

MAL-2025-6644 Malicious code in pakumaku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 900b8179fb7ecc8121b77921a5a6c394547bd506367aed2bc638dbc82985396e The OpenSSF Package Analysis project identified 'pakumaku' @ 9.9.9 npm as malicious. It is considered malicious because: - The package executes...

MAL-2025-4968 Malicious code in zoralabs-mintflow-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1dea74f24050807f2f9e6e3d33c631a3ac6e2a8e0c2df829ccb6c8362d0c46b Any computer that has this package installed or running should be considered...

MAL-2025-4987 Malicious code in pagumagu (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7dd0338a9ff4f006cf80fb43fe8dd3b5ed34ab8ff162dd64ff66d4be80a9a338 The OpenSSF Package Analysis project identified 'pagumagu' @ 9.9.9 np...

MAL-2025-4958 Malicious code in snapshot-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b418521074d89cfa7dafcbd2a57c8ea782c643409c895f9ac30d372688473947 Any computer that has this package installed or running should be considered...

MAL-2025-4957 Malicious code in com.unity.dt.app-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22edbd19ec2c1688066d58a9c5836e4bcd30e7c64221187b158ccd8b65895932 Any computer that has this package installed or running should be considered...