MAL-2025-2349 Malicious code in spot-the-station-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb32a10195bed4025536ad80a8fc81f68b24c95dc8f8db05358097fcb07bc613 The OpenSSF Package Analysis project identified 'spot-the-station-app' @ 2.1.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-2348 Malicious code in k8s-deploy-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84c86c15f129692c3b73b16951c9f12754789e3a5ea36e3e5d517e05c7e0231b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2344 Malicious code in mocha-dast-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09f8297f30739d5810d9dfb46db787d2d403256217f71cbd9b85c5e8671ff8f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2341 Malicious code in @contraktor-tech/poc_confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fb8ec2fd9c3fd1eb30ca17367b62f932aa239c8b9209269913e9c88ea105536 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2340 Malicious code in notification-center-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3608296b1021343f3245e75793f59483ee9c78f0aa41ca662756286d02d348a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-0118

A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this...

MAL-2025-2293 Malicious code in cfa-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aac7ddc598f480a5c87bd28d65a6fc762b5c9ce46b72934eabe3760b49f11a36 The OpenSSF Package Analysis project identified 'cfa-react-components' @ 2.8.8 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-2292 Malicious code in hybrid-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eac5872f7c58c6dc0aa16876689ec20891753358c36a7a1c35c223e3d3f9cf38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2290 Malicious code in actions-project-version-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dfacd7dc56f2f0ae2b911d6bd9b2b8d50e4273f1f28a014bf64dfa9fdb9ff3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2288 Malicious code in customer-identity-mfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4077d7dbb9f3ee9d04701dde8555a12f1b9437942c6e70540060d16e0288435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2289 Malicious code in customer-identity-mfe-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f4bceaecd0bf3f0387bb417a86c4c6e4f53764a6a38ce58717d12c68b024cfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2232 Malicious code in cb4good (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c16e1ebf21c15491517654d93507f4ac7ca8aa96e47403f10fd753ef7bcbca95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2230 Malicious code in pixelary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed6e04cfdf17df0b3303f51acdf9e0e128361f17eef5fa028f6bd70d3436984c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2229 Malicious code in limit-order-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7ad6cba9faf323fb0ffae19f703ba40944f39673b2e8803037d19ff0990671f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2226 Malicious code in atlas-user-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7efee27a6c041d66384de635910c04fe43fa2c193ad0a47efb69acb84fb16ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2228 Malicious code in prblingd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7886e2696ffc6e35d7a80ad30ee51258e49c741e17d02b5d6c83d370fe5165a8 The OpenSSF Package Analysis project identified 'prblingd' @ 1.0.3 npm as malicious. It is considered malicious because: - The package executes...

MAL-2025-2223 Malicious code in patternfly-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057836fcde782f283efd1e52688d31d8375cd7d963b136908d1457ea24e64193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2217 Malicious code in zuaxnull (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0102d9e67b5914e4b927ed99c53f8fa5878a3dcc3391ac1e6c6575533a2a3f4 The OpenSSF Package Analysis project identified 'zuaxnull' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2213 Malicious code in next-tab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cabe10794524f4f4cd9eaef39f3eb0a9ac3a110d7d5d5c4f58ff804630ec097 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2212 Malicious code in testnet-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edd3718e0e37096149d4d64985025d95be3edcd077f04cf23ed0165b2b8b8b8d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...