Malicious code in ng-tds (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b3294da0f9faffb8ba69b152216b52a8aa4ebcf64678bcd336c917b3e054530d The OpenSSF Package Analysis project identified 'ng-tds' @...

Malicious code in theme-rushstack-suite-nav (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 074f653dbf45333a4bcc8de28235ca35817a8f8c9e06e26b07010a325b039aa7 The OpenSSF Package Analysis project identified...

Malicious code in typescript-5.9 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 534854085104d22f0ac766feb226c4d29eaaa0b973c0d509362f32c415af7871 The OpenSSF Package Analysis project identified 'typescript-5.9' @...

Malicious code in eslint-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b6f571e9facdadc164a1e0a5ed2a298a233bbc3138ef7df78bae9d0a3d588a4 The OpenSSF Package Analysis project identified 'eslint-9' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in google-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a306188997a3decdf3eb0566e9ec1b3f81c5b1e0b4269eff69342744a9bad64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41266 Malicious code in google-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a306188997a3decdf3eb0566e9ec1b3f81c5b1e0b4269eff69342744a9bad64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41425 Malicious code in @navancorp/fe-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85c47c473abe59dd1714ed889d2aba7ac40eb668ba9cb8bc5fcc0a11f33c69e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41423 Malicious code in @navancorp/angular-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c94679c1658a3cfefa49daf06a90a50daeb480069b754976a6f72efa2e4e1d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41424 Malicious code in @navancorp/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c1de6ab614103c47766130fafe2ddecb44f6c2cef32971d3da5418641756227 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @navancorp/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d23863df2bb18ff4d7478d9d974206ad5e1959e64da8883e6623a5747b4ad3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41260 Malicious code in catflix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f682b0d66f1100534a823b754c3bc096ac54a5142489698fc5589813699d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6973 Malicious code in flatfox-api-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in commonweb-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0062bd72b843a0cab680d5655259ce9502b602bf366057232de9469f99b853e3 The OpenSSF Package Analysis project identified 'commonweb-flow' @ 10.11.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in everglow-moose-eaf816-project (npm)

The package everglow-moose-eaf816-project was found to contain malicious code...

MAL-2025-6972 Malicious code in verizon-media-open-source-project-protal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5effa09096e10b22706af0dd8301a46baa8c707c7979154017d0493e25abf88 The OpenSSF Package Analysis project identified 'verizon-media-open-source-project-protal' @ 2.0.1 npm as malicious. It is considered malicious...

Malicious code in solana-pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45d581c17210e8be2e111136cc9853e7c698eaabd46c44482037ba1436c5b9a0 The OpenSSF Package Analysis project identified 'solana-pump-sdk' @ 1.4.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6971 Malicious code in solana-pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45d581c17210e8be2e111136cc9853e7c698eaabd46c44482037ba1436c5b9a0 The OpenSSF Package Analysis project identified 'solana-pump-sdk' @ 1.4.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6815 Malicious code in poloman (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0ddad11abce315f670c04e89d4e0adc1cd0b1bbd6a7de8d1715d74bf8d99ca4d The OpenSSF Package Analysis project identified 'poloman' @ 9.2.1 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2025-6804 Malicious code in sendbird-visual-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c99c539ebeed9289f0f603fbfe2d80bc9fe35f624bbd036ad397617db3be8de2 The OpenSSF Package Analysis project identified 'sendbird-visual-test' @ 11001.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-6800 Malicious code in sendbird-docs-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8e9f1e70bd8605ecac970f5651ab351d6560a0001119746388c77f590ba4d4 The OpenSSF Package Analysis project identified 'sendbird-docs-validation' @ 1005.0.1 npm as malicious. It is considered malicious because: - Th...