5512 matches found
MAL-2025-45582 Malicious code in pp-react-country-input (npm)
The package pp-react-country-input was found to contain malicious code...
MAL-2025-46116 Malicious code in spark-nextjs-app (npm)
The package spark-nextjs-app was found to contain malicious code...
MAL-2025-42118 Malicious code in xavialonzo (npm)
The package xavialonzo was found to contain malicious code...
MAL-2025-47769 Malicious code in fucknukerbro (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9cf00cbb3858ebd2227a86195c621a7f8ca9675a11e80de401d0d1b05c5f13f6 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-41342 Malicious code in typescript-6.0 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0cd1eb2749ce618a7dbf198dab8918ade0798770a8b15d51e27738bd05f3cd0 The OpenSSF Package Analysis project identified 'typescript-6.0' @...
MAL-2025-41343 Malicious code in typespec-http-dispatcher (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb7c439ba2209388ade9aba27b75e50772bef4afa861aaaf5b7abf6b447a1620 The OpenSSF Package Analysis project identified...
MAL-2025-41392 Malicious code in markdown-agent (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41377 Malicious code in conversation-memory (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41386 Malicious code in github-socket-worker (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41369 Malicious code in api-react129 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41358 Malicious code in @stackgl/gl-conformance (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6402e01df0460d9b2d3778bed73dc61d60fc700196a3bb56a2e91768227f3391 The OpenSSF Package Analysis project identified...
MAL-2025-47771 Malicious code in hacktool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ae918afa1c3b130c4df2aa0a968a44eee15feebeb1c1df562a56feb37db96423 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-47785 Malicious code in lolcrazy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9e3fc2ad284d2b4b286da2fc5762b18aade19bc38871779157c54cdb6ae8b4cd Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-47812 Malicious code in woowoowo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 68c093297f2648c1f7fbdccd35b7191bf273b78dbcefdae24c26a9739cfad086 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-47790 Malicious code in nukecount (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1c580cf8d8131f2ffd1d0f7b171d118de85e69ef0f1d1b67f5ebc8b5ce3c804d Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-47800 Malicious code in randar303 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9ec94332277ac2c470647f10f1be8faace9da41d55c024e2d33c021ffe69f88d Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-41251 Malicious code in @navify-platform/idle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4c05f7983c6a597941a36c8177f63342feee29acb5d3922471e2fa25da4f159 The OpenSSF Package Analysis project identified '@navify-platform/idle' @ 2.3.0 npm as malicious. It is considered malicious because: - The...
MAL-2025-41379 Malicious code in dc-poc-test (npm)
The package communicates with a domain associated with malicious activity...