Malicious code in awesome-icon (npm)

The package awesome-icon was found to contain malicious code...

Malicious code in core-icon (npm)

The package core-icon was found to contain malicious code...

Malicious code in @zalastax/nolb-_hyper_fun_material-icon- (npm)

The package @zalastax/nolb-hyperfunmaterial-icon- was found to contain malicious code...

evy-fanyi (>=0.0.1 <=0.0.2), starry_icon_tool (=1.0.0) potentially affected by unknown CVE via langdet (=0.0.1-security)

langdet NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on langdet and may be impacted: - evy-fanyi =0.0.1, =0.0.2 - starryicontool =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-24945...

MAL-2025-38508 Malicious code in vite-css-icon (npm)

The package vite-css-icon was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @zalastax/nolb-_hyper_fun_material-icon (npm)

The package @zalastax/nolb-hyperfunmaterial-icon was found to contain malicious code...

Malicious code in edx-icon (npm)

The package edx-icon was found to contain malicious code...

MAL-2025-15215 Malicious code in awesome-icon (npm)

The package awesome-icon was found to contain malicious code...

MAL-2025-19228 Malicious code in edx-icon (npm)

The package edx-icon was found to contain malicious code...

MAL-2025-10099 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-h (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-h was found to contain malicious code...

MAL-2025-10100 Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-i (npm)

The package @zalastax/nolb-hyperfunfluentui-icon-i was found to contain malicious code...

MAL-2025-17575 Malicious code in core-icon (npm)

The package core-icon was found to contain malicious code...

MAL-2025-9669 Malicious code in @wisetail/wds-icon (npm)

The package @wisetail/wds-icon was found to contain malicious code...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-50154, CVE-2025-59214 Windows File Explorer Zero C...

Malicious code in react-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dc16e0765ddb06bcc46c49b58deba17ff9d4fce6cc5b65ebba0f617cf44fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview react-icon-maker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in react-qrcode-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7415d66ef3e5a6e0067c5808f2f7929a2e7ec2b74003252747a89dfe7341b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview react-qrcode-icon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-6371 Malicious code in react-qrcode-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7415d66ef3e5a6e0067c5808f2f7929a2e7ec2b74003252747a89dfe7341b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6370 Malicious code in react-icon-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46dc16e0765ddb06bcc46c49b58deba17ff9d4fce6cc5b65ebba0f617cf44fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...