MAL-2025-6950 Malicious code in project-luck (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6898 Malicious code in 6sdgsd6s-control (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6909 Malicious code in actor-alarms (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6878 Malicious code in biocatch-capacitor-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b0a760092b9cf8b6d14cdcfd198b9f2155dd4de76697941bf5ed7bc728bf38f The OpenSSF Package Analysis project identified 'biocatch-capacitor-plugin' @ 9999.0.1 npm as malicious. It is considered malicious because: - T...

MAL-2025-6965 Malicious code in translatables (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6969 Malicious code in vsts-powershell-task (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6913 Malicious code in boss-eeeeeeeeeeeeeeui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6900 Malicious code in @angular_devkit/architect (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6905 Malicious code in @identity-authn/authn-js-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6946 Malicious code in pentest-event-emitter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6951 Malicious code in pydantic-settings (npm)

The package communicates with a domain associated with malicious activity...

airbasix (>=0.2.0, <=0.3.0) potentially affected by unknown CVE via wix-data (0.0.1-security)

wix-data NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on wix-data and may be impacted: - airbasix =0.2.0, =0.3.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-39367...

1yoouoo (>=0.0.5, <=0.1.2), bluebottle-magento-marketplace (>=1.1.2, <=1.2.5) +6 more potentially affected by unknown CVE via module-name (0.0.1-security)

module-name NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on module-name and may be impacted: - 1yoouoo =0.0.5, =1.1.2, =0.0.2, =1.0.1, =1.0.0, =1.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-26605...

MAL-2025-14126 Malicious code in aedmapper (npm)

The package aedmapper was found to contain malicious code...

MAL-2025-40228 Malicious code in yankee-76r-project (npm)

The package yankee-76r-project was found to contain malicious code...

MAL-2025-11886 Malicious code in @zalastax/nolb-han1 (npm)

The package @zalastax/nolb-han1 was found to contain malicious code...

MAL-2025-35364 Malicious code in test-mlw2-fordo-plead-biffs-hosed (npm)

The package test-mlw2-fordo-plead-biffs-hosed was found to contain malicious code...

MAL-2025-38649 Malicious code in vs43 (npm)

The package vs43 was found to contain malicious code...

MAL-2025-40089 Malicious code in yacht-charlie-rlce (npm)

The package yacht-charlie-rlce was found to contain malicious code...

MAL-2025-24670 Malicious code in kiwi-yacht-vtmp (npm)

The package kiwi-yacht-vtmp was found to contain malicious code...