MAL-2025-4615 Malicious code in bombomfortester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2119b099a99b02e77d8dffa997198ef3e58b31b1073e8d0d8ba4e56c36bf2cda The OpenSSF Package Analysis project identified 'bombomfortester' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in consumerweb-captcha (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7cee9c3e993b7ea96db267f4f869102dd00139de3ea743914d0273ef165a99a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4624 Malicious code in inter-frontend-svgs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cef0c87cb238b6a66e63b6ede215bd1d867b47ff3bcad84258647d55c810c520 The OpenSSF Package Analysis project identified 'inter-frontend-svgs'...

MAL-2025-4622 Malicious code in bombombombom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4feeabe972dbf8a97f4ab7dc12a732e46cb7ac49559cccdb432dc3513b3f6c38 The OpenSSF Package Analysis project identified 'bombombombom' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4611 Malicious code in is24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1781ddf04bb479bb1a5178f987729c525417b1cc220c1be7fefbd9f86ccc7a23 The OpenSSF Package Analysis project identified 'is24' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2025-4617 Malicious code in scout24 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b242bd481e8c1d33c1fd6c0237e483642705a31e0b42c50dae0d75f8ca4c7e69 The OpenSSF Package Analysis project identified 'scout24' @ 1.1.1 npm...

MAL-2025-4610 Malicious code in shiva_rrrraaaaooo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f76f9821127e0fdeb967db2d6c2e889b5e80f28e6bd4083e93266f5d8f4fc136 The OpenSSF Package Analysis project identified 'shivarrrraaaaooo' @ 1.1.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4591 Malicious code in openkitjs-simple-sample (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b86b90f2ffa63945be2355f5639543a032f0a57ea59dabe377573e35e9d6507b The OpenSSF Package Analysis project identified...

MAL-2025-4584 Malicious code in arc-offsec-custom-library2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a8fa793672d2e0686853c58a6768867a936971cb91561c3a1cbcebda67c22121 The OpenSSF Package Analysis project identified 'arc-offsec-custom-library2' @ 1.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-4542 Malicious code in @hd-base/atoms (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4427 Malicious code in @fmr-pr103625/apex-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 87f7d6eefb4242b16b30fbedd12103828145a5d82610917904a48a2ee5b1f063 The OpenSSF Package Analysis project identified '@fmr-pr103625/apex-core' @ 1.999.2 npm as malicious. It is considered malicious because: - The...

MAL-2025-4537 Malicious code in @abacusmirror/react-fontawesome (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4581 Malicious code in syf-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a36b5dfd63736b61215e259a345ecf4691a6553267af52ff5485d1e5a8889c81 Any computer that has this package installed or running should be considered...

MAL-2025-4484 Malicious code in ideals-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4816f617c76fa25d8130b9f4db4d16b0e8929fdf625916b1b91c25eb920b2 Any computer that has this package installed or running should be considered...

MAL-2025-4563 Malicious code in inter-dc-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3519842408c6f836557f6b1b522e6af8e3727479c1ccbbf5bbc1a9537cfb4e44 Any computer that has this package installed or running should be considered...

MAL-2025-4566 Malicious code in k8s-lint-action (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b445cff5be01caddf1be7a89f1cea09fce4135e635b83655ff150c35b8940e86 Any computer that has this package installed or running should be considered...

MAL-2025-4565 Malicious code in justeatapplepayjs (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4554 Malicious code in cspotcode (npm)

The package communicates with a domain associated with malicious activity...

Phare: a Safety Probe for Large Language Models

Ensuring the safety of large language models LLMs is critical for responsible deployment, yet existing evaluations often prioritize performance over identifying failure modes. We introduce Phare, a multilingual diagnostic framework to probe and evaluate LLM behavior across three critical...

MAL-2025-4424 Malicious code in @cat-ecom/pcc-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 96cbe81d68d4bf1046012598de37b5dcef6f28b3ce01653ab29b3405b359d30e The OpenSSF Package Analysis project identified '@cat-ecom/pcc-components' @ 99.99.99 npm as malicious. It is considered malicious because: - Th...