MAL-2025-8513 Malicious code in @malware-test-booky-resty-lathi-value/test-mlw3-booky-resty-lathi-value (npm)

The package @malware-test-booky-resty-lathi-value/test-mlw3-booky-resty-lathi-value was found to contain malicious code...

MAL-2025-8004 Malicious code in @hishpr/in-beatae-quae-occaecati (npm)

The package @hishpr/in-beatae-quae-occaecati was found to contain malicious code...

MAL-2025-12493 Malicious code in @zalastax/nolb-ng1 (npm)

The package @zalastax/nolb-ng1 was found to contain malicious code...

MAL-2025-8875 Malicious code in @malware-test-rarer-routs-gaums-moory/test-mlw3-rarer-routs-gaums-moory (npm)

The package @malware-test-rarer-routs-gaums-moory/test-mlw3-rarer-routs-gaums-moory was found to contain malicious code...

MAL-2025-28892 Malicious code in pasinf (npm)

The package pasinf was found to contain malicious code...

MAL-2025-29674 Malicious code in pro-dj-link-to-midi (npm)

The package pro-dj-link-to-midi was found to contain malicious code...

MAL-2025-24721 Malicious code in koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics (npm)

The package koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics was found to contain malicious code...

MAL-2025-7677 Malicious code in @crabas0npm2/molestias-sunt-fugiat (npm)

The package @crabas0npm2/molestias-sunt-fugiat was found to contain malicious code...

MAL-2025-41067 Malicious code in zpgp (npm)

The package zpgp was found to contain malicious code...

MAL-2025-6872 Malicious code in search-result (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ddb1c5d5505a20da7fa64201ed64cc4b487447debb5dfac4a7d1398b93bcb1a The OpenSSF Package Analysis project identified 'search-result' @ 10.11.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in risk-profile-widget (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in ethers-js-core (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in react-server-dom-turbopack-experimental (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 919b44a54d192c9600403c1ad155e8d4c1652c00f211b52d40f3b61893419ba9 Any computer that has this package installed or running should be considered...

Malicious code in airbnb-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a1d7d33c25e202a6ad49fb54065863092fb024863cb59952744ea002c333bab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-5889

A denial-of-service DoS vulnerability has been identified in the brace-expansion JavaScript package. This issue occurs due to inefficient regular expression complexity, which can be exploited by an attacker providing specially crafted input. Such input could lead to excessive processing time and...

Linux Distros Unpatched Vulnerability : CVE-2022-24773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification...

Malicious code in meli-payment (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1583 Malicious code in example-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8f7b351d38960b71f0f51ada047da6ff08501cd8f58b679cbfd6e8c5cc7b032 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-745 Malicious code in nodejs-paypal-checkout-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909c8505097e7b62c38bde6c75bb0ba8516f566136ec093b913944bcbdd1130e Any computer that has this package installed or running should be considered...

Malicious code in lyft-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b6c2c8a640e356df7915efc2dbff4c6612d5995a84d32090e38a5fe4ee11eb4 The OpenSSF Package Analysis project identified 'lyft-cache' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...