MAL-2025-48894 Malicious code in my-test-packagexx (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-191621 Malicious code in cheezokdi10 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dd24bfc0e91de2e63355bbbcc13bd07d47a58a3925d15cfc522a1ea407c2a945 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191634 Malicious code in humunculous5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 653da18ccefceb9c2bc1dc858e100bcc242e88b449225e1c9337487da1af3826 Packages that either reports home installation, simulate malicious activity or imitate Roblox API wrapper. --- Category: PROBABLYPENTEST - Packages looking lik...

MAL-2025-191653 Malicious code in ptxcompiler (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a157c2b8ad78e45eea0b8e20ef6d466cdefbd686ac62041c13580048283ba7a1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-48498 Malicious code in internal-config (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-47838 Malicious code in @lanyer640/mcp-runcommand-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 579dd9f67fcc75d122b101f5772fefa4c424495f6d36aac46c51baf3e0263ea7 Any computer that has this package installed or running should be considered...

MAL-2025-47731 Malicious code in test-grabber-package-xyz789 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47723 Malicious code in remote-dom-1 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47712 Malicious code in phi3ext (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47707 Malicious code in otlp-metrics-export (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47696 Malicious code in node-ts-cjs-web (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47694 Malicious code in ng-dev (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47678 Malicious code in hub-state-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47660 Malicious code in example-b2b (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47652 Malicious code in d-aliased1 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47649 Malicious code in cua-server (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47642 Malicious code in com.unity.test-framework.graphics.performance (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47614 Malicious code in betterconsoles0 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47431 Malicious code in ansi-styl (npm)

The package ansi-styl was found to contain malicious code...

MAL-2025-47787 Malicious code in mevguard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46b2aa8c02569ef9c6bab8214553d7af8d7e1c1f3499324654bb30870832f6f5 The obfuscated code provides "initializesession" function that exfiltrates the provided argument. --- Category: MALICIOUS - The campaign has clearly malicious...