CVE-2025-59143

Summary (CVE-2025-59143) : The issue affects the npm package color ([email protected]). An account takeover via phishing allowed an attacker to publish a malicious patch that inserts a payload in the browser context to redirect cryptocurrency transactions to attacker-owned addresses (e.g., wallets like...

MAL-2025-22666 Malicious code in hotbeer (npm)

The package hotbeer was found to contain malicious code...

MAL-2025-20558 Malicious code in filterui (npm)

The package filterui was found to contain malicious code...

MAL-2025-23056 Malicious code in illusion_sirr0_yuxo9_zodiac (npm)

The package illusionsirr0yuxo9zodiac was found to contain malicious code...

MAL-2025-22787 Malicious code in hulasync (npm)

The package hulasync was found to contain malicious code...

MAL-2025-10729 Malicious code in @zalastax/nolb-autu (npm)

The package @zalastax/nolb-autu was found to contain malicious code...

MAL-2025-15070 Malicious code in aurora_uxq0w_6xjjr_lily (npm)

The package aurorauxq0w6xjjrlily was found to contain malicious code...

MAL-2025-15901 Malicious code in blutbad (npm)

The package blutbad was found to contain malicious code...

MAL-2025-26849 Malicious code in mteeor (npm)

The package mteeor was found to contain malicious code...

MAL-2025-19514 Malicious code in eletron (npm)

The package eletron was found to contain malicious code...

MAL-2025-17268 Malicious code in cognicor (npm)

The package cognicor was found to contain malicious code...

MAL-2025-27022 Malicious code in myth-lava-flt044-project (npm)

The package myth-lava-flt044-project was found to contain malicious code...

MAL-2025-32824 Malicious code in screwdriver-data-model (npm)

The package screwdriver-data-model was found to contain malicious code...

MAL-2025-13201 Malicious code in @zalastax/nolb-po (npm)

The package @zalastax/nolb-po was found to contain malicious code...

MAL-2025-10789 Malicious code in @zalastax/nolb-bis (npm)

The package @zalastax/nolb-bis was found to contain malicious code...

MAL-2025-26575 Malicious code in mocha-graphql-ursa-carina (npm)

The package mocha-graphql-ursa-carina was found to contain malicious code...

MAL-2025-14455 Malicious code in amongushacks (npm)

The package amongushacks was found to contain malicious code...

MAL-2025-16462 Malicious code in callisto-playwright-chariklo-exoplanet (npm)

The package callisto-playwright-chariklo-exoplanet was found to contain malicious code...

MAL-2025-16003 Malicious code in bot-fb (npm)

The package bot-fb was found to contain malicious code...

MAL-2025-16614 Malicious code in caseum (npm)

The package caseum was found to contain malicious code...