1886 matches found
MAL-2025-5043 Malicious code in natumatu (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5020 Malicious code in @evoplay-spinential/test-module (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad89d688671d0118dbcde38aeb62e434fef8e3cae3aed2f114f8553caecefa29 Any computer that has this package installed or running should be considered...
MAL-2025-5057 Malicious code in requests-json-overview-pkg (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0086e01d67b35f7c81bc1dd5ed909ade2520cf967356bfd3b4849d1372952a6a Any computer that has this package installed or running should be considered...
MAL-2025-5056 Malicious code in requests-json-overview (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8009e6f4e6416f898819130b2befd315297272af6764740f522acfd719576a0c Any computer that has this package installed or running should be considered...
MAL-2025-4953 Malicious code in mdp-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9dbfb2d3ae272dd0bda3bab2d03d7f1461dc50e5b834fd48ab7510f7e55b2a5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5041 Malicious code in my-not-confused-package (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f9e1b36861dc7d436646c98a4561c0b4ae98fde63ed542a420740ed934f194a Any computer that has this package installed or running should be considered...
MAL-2025-5050 Malicious code in react-card-security-code (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1ee206260c832fcc9736dc58bdd69c339579082e7216fd531b76689c04730e5 Any computer that has this package installed or running should be considered...
MAL-2025-5048 Malicious code in plonkscript-vscode (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd8b408dc44765c7024604210cc19ed0865efde3585895653edf022fecd41d5b Any computer that has this package installed or running should be considered...
MAL-2025-5047 Malicious code in plonkscript-ui-project (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c977dd9beb9d0a79deee319f92b4d206fc255a28241815672b07694561aa6272 Any computer that has this package installed or running should be considered...
MAL-2025-5060 Malicious code in sitewidesearch-client (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db1cd58fbfc07f7e9343fda6eb8ac3f48dffd00d4766ec9680eb72e698baf209 Any computer that has this package installed or running should be considered...
MAL-2025-5042 Malicious code in mypocmaliciouspackage-cursorpt1 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5029 Malicious code in cosmy-wasmy (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ae3c22beee95c306b386c69c33361301618a553e2920cf5fbde155626fc84f Any computer that has this package installed or running should be considered...
MAL-2025-5017 Malicious code in @biovia/amd-loader (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5030 Malicious code in cycle-a (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-5016 Malicious code in 0vulns-dependency-confusion-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d282025fb2ec1b4012e3b979cec1f66520e643fcadfd2864e54989de50dd00d The package.json preinstall script runs wget against an attacker-controlle...
MAL-2025-4934 Malicious code in zora-utils-core (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a55ebb2c5179f192b3e0cb586a0bca313b3288b7b71ac7bd70725eb2d41b1e9 Any computer that has this package installed or running should be considered...
MAL-2025-4933 Malicious code in cmp-spid-login (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4229460b134c6c1fe4e3accbf1756e1706643a8d37bfd8a3cbe2817c11d4ced The OpenSSF Package Analysis project identified 'cmp-spid-login' @...
MAL-2025-4932 Malicious code in uniswap-v4-scratchpad-poc (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01754c5d133c195a4c109504b5db8355893e90a308a2317d421d8f2d034cad23 Any computer that has this package installed or running should be considered...
MAL-2025-4931 Malicious code in volehai-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695b1f1647ff88855017c178d47ab04527b14c3817e9b4ed343c1220cc7b18df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...