Malicious code in gear-idea-indexer-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e4383fa116dab4a076fef8694ef177acb72f5e46038222fdc48e6339dc84a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3739 Malicious code in gear-idea-indexer-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e4383fa116dab4a076fef8694ef177acb72f5e46038222fdc48e6339dc84a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3725 Malicious code in @nitro2/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140caf464a34fc34d7fea71e7561ee5849558b1ee1c7987c9a38c265eb22e4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3726 Malicious code in com.unity.cluster-display (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017254017be28523d1d339bd21b2d15cfa38d299a6dfd0df7a157028c544bac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3719 Malicious code in braze-cordova-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a134f7ad8ed6890c33961d6e435a617d86f125f858f0009c731660c708a8c66e The OpenSSF Package Analysis project identified 'braze-cordova-sdk' @ 14.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3711 Malicious code in @phone_base_ui/base_call (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9aab6d4f24fd03ee2b4d79a09c130b16c81828aaae5459a60b22282460bdd1a6 The OpenSSF Package Analysis project identified '@phonebaseui/basecall' @ 99.9.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-3704 Malicious code in opensource.ripple.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db6640c2642fecbcd1114796262a8099bf2f0db6e5f020af28ce841c8f35e27a The OpenSSF Package Analysis project identified 'opensource.ripple.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-3713 Malicious code in @dm3-org/dm3-lib-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdc7c9221213814713a1de5a0f5527c3975c0942520d64147788ea8869d8efe8 The OpenSSF Package Analysis project identified '@dm3-org/dm3-lib-shared' @ 1.7.2 npm as malicious. It is considered malicious because: - The...

MAL-2025-3703 Malicious code in @ltcp/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2baf7cb605079da5c92272d2ccd46c71bace13775a592149553f3b1ba398837e The OpenSSF Package Analysis project identified '@ltcp/ui' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3702 Malicious code in @cewe-phoenix-themes/default-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fefa5fe5221477fe4ca130e84721255986e7b048f3e5922c99cac89d94df83 The OpenSSF Package Analysis project identified '@cewe-phoenix-themes/default-theme' @ 99.9.1 npm as malicious. It is considered malicious...

MAL-2025-3960 Malicious code in @sage-org/fabric-ui-root-config (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-3700 Malicious code in airmason-employee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8954b40939c6627506907db7e85071941c5095c106f21463227c57f81020a8d The OpenSSF Package Analysis project identified 'airmason-employee' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3959 Malicious code in @flcore/login (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-3958 Malicious code in @chat-components/common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-3667 Malicious code in gx-npm-messenger-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26007d847aa029d08defbaa44538b81f13b13adfd8edb4c7ea3fc335a439e0f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3666 Malicious code in ias-dashboard-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c5e715ecf1204e540d58dcb1f94d07ca5724d7a1a0df89b355dbe88545c5185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3665 Malicious code in adobe-appmeasurement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2e1a6ab2727fff95ff2726535e9abc2aff5f5af6b0d3562277bff133ee14a67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3602 Malicious code in testveriftest1asdlaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b241cae62c005e3cd31a8251941ab101ebcca75aa4c8cb988905e87529339cd During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3603 Malicious code in testveriftest1asdlaaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ff36b3e2ad882727ed964a43d4599f3713d2bada89b6cec169d727127c21c2fa During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3966 Malicious code in m0m0x01d (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf9d4d88bcd57cd129a2bfb1c41647f7cd847148dfcd7c700f5d8a345a2a8f9a Any computer that has this package installed or running should be considered...