MAL-2025-2802 Malicious code in web-commerce-hook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3db0dcb1f890e4ce0fdf79bcdd216d419d1bdcefb1cac333858a78b0d7efa3ca The OpenSSF Package Analysis project identified 'web-commerce-hook' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2801 Malicious code in nextmvc3primary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9d8a367c5538d9d76897813994ee49411b97862b8fa79250cb918d36c78f5a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2800 Malicious code in eqbank (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cb4c6c3534c2743f4bda73f51a773076db5813a4a72f7117d73feb0475ce70c The OpenSSF Package Analysis project identified 'eqbank' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2025-2799 Malicious code in sony-liv-smarttv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61696a41d9c61203ebde9adcecf521e954619c6273e75d9da24c9f402aaeb603 The OpenSSF Package Analysis project identified 'sony-liv-smarttv' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2798 Malicious code in regiepult (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb97746019afc4520cfc1ec58e6a89d054badad6b99024ec45a5c368ccc2bead The OpenSSF Package Analysis project identified 'regiepult' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2797 Malicious code in careform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7248630d858215437792791bab0fa4a0e67e7a614e29fe427c829e371c5a5bc The OpenSSF Package Analysis project identified 'careform' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2796 Malicious code in rippling-marketing-site (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33a7126a0a4c766d46bba75737e5f330267038f14b6006030e92fc55e076d658 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2794 Malicious code in @nationalgeographicsociety/ngsui-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2e0774a528586e00ee067cc42c7701529d5ea60809590ae156b473dffb95b4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2793 Malicious code in castorama.pl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 730bed67861cb1d30e187eb40b957257e8395b86e8a9e255005ba3b808369878 The OpenSSF Package Analysis project identified 'castorama.pl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2732 Malicious code in @johndeere-tech/helios-mat-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 226a36baff3a45f171643849384a2b5ba6f9120f2a98d58b2589fc9381fc1c8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2733 Malicious code in @johndeere-tech/helios-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99b3379997f7c1fa963e3f0022064669ccae41425799fd8d62cbcda0d2d01651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2730 Malicious code in webhooks-contacts-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823e5cf1e6fd5a930dbd702f998d1d88ae58e255f62e920b0262615ac2efdbbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2727 Malicious code in eslint-config-hectorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f6f7f9a7ef4ddc982849df1b0144158db3f60bef6633d7797c6f25a18cc2ec2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2625 Malicious code in zqdllqdz15975321 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de6b890c4ed0e92b46092818376b4dac9d924307df67e0ab8e277947b3844718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2624 Malicious code in codex-cipher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ce020b1fc0f9d126255429ca44d4407527446d2650c546670d79bc9c84056cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2609 Malicious code in eclipse-tractusx-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5357a55497ee86b69ff4768aee0d28461a0f024df6f74c50c2511d1032cf3128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2608 Malicious code in ccfk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e4078a85a3be32051188e1ab1422012bc936d9b067d3f3968a89b6bba7af925 The OpenSSF Package Analysis project identified 'ccfk' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in gh-find-current-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aba54c4eb36c259689cdca7db5a45c0b6cd53c7a27670e8a557c3b802afd97f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2607 Malicious code in gh-find-current-pr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0aba54c4eb36c259689cdca7db5a45c0b6cd53c7a27670e8a557c3b802afd97f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2606 Malicious code in tec-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2ef98a8d8e55d815b7f3d3955fb72a5387e95a9f22ab1702df9d88b2c152a18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...