26 matches found
MAL-2025-6749 Malicious code in pexels-figma (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6040 Malicious code in @toptal/picasso-alert (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6513 Malicious code in gramapi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2c3452393093f1f74c19a9049b50fb9c96e9b31ef8235cf0597eb656e6feb8ea The code is automatically starting, calling a Telegram channel with basic info, and waits for remote code to execute --- Category: MALICIOUS - The campaign has...
MAL-2025-5801 Malicious code in @rupahealth/design (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0616aa94e7e7f933fb1f912840b3ec202980dde2d75d689d36e2d3cee1a22cec Any computer that has this package installed or running should be considered...
MAL-2025-5163 Malicious code in jimu-layouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65e335b07773d41eec063c08f22dfd26f8bbb4ea165ab0080df6f0d105f9e2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5473 Malicious code in vuepress-plugin-gitlabment (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-4389 Malicious code in prettier-config-rth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3baf2a5f3efec1eace5c6720887b40bd8a5019168357ff749e8eef0b03c4b2a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3709 Malicious code in earthdata-search (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6143e190ce7b6c735897a26bf249ebaecc8b9c2c7626e0f21cfd2afe32ad06 Any computer that has this package installed or running should be considered...
MAL-2025-3162 Malicious code in sasha-bsc-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6367569e4a02b7a1a9d97e0d7cc953768bdfbc31f96e2cc9deb7a5610eb149c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3062 Malicious code in airbnb-dls-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d026d9563a73efac2558b2cf71cd6696600aecb85004606ba3dd3a87100bad0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1800 Malicious code in epicagames-connect (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1694 Malicious code in @mp-food/knapsack (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1348 Malicious code in deepcoin-internal (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00eb83eff2eeb19ff872da9610ae40247140536ea979ba39b846c577ab024631 Any computer that has this package install...
MAL-2025-1308 Malicious code in gate-production (npm)
This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e5829c327248d41abf070c9c23598e436a2fefc55efc2986ff6ca1ba771ef61 Any computer that has this package install...
MAL-2025-1013 Malicious code in apple-sdk (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...
MAL-2025-744 Malicious code in jqtools-overlay (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-664 Malicious code in google.kythe (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd92576cb52e3439544b9c66be7914a1f7326c8ac3ab1ab692d694ae00d5806 Any computer that has this package installed or running should be considered...
MAL-2025-669 Malicious code in kibana-release-notes (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-220 Malicious code in prem-babu-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e749c21a26a377a26000dd72c19e7a3d7e331ead388c3dfdecce559de1dd6db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...