detections

detections This is a repository for information that might be useful to detection maliciousness in your environment. This is not exhaustive and please use it at your own risk validate your findings!...

Malicious code in @capsense/core-ui (npm)

Source: ossf-package-analysis 8392b3f36f3576b4ce8308df7d98e3cfd6b68b6873116743a022c9940ee4515d The OpenSSF Package Analysis project identified '@capsense/core-ui' @ 99.99.100 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in sc-wizard (npm)

Source: ossf-package-analysis 54691cc130e614ee031186f7e646c3e6076efad6105a6e9cad68f62aa736516b The OpenSSF Package Analysis project identified 'sc-wizard' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. --...

Malicious code in brass-common (npm)

Source: ossf-package-analysis ab25e940e6abf9009b89e6480c744db72c4ea0be4d83d095ead744e83055b7cf The OpenSSF Package Analysis project identified 'brass-common' @ 99.9.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

MAL-2026-17747 Malicious code in kmf-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce04d25dced1e4c2398d7d91568783b983f326444098ecff8ddf7c29468d752c [email protected] is published with the version-number and behavior shape of a dependency-confusion reconnaissance beacon rather than an i18n...

Malicious code in kafka-roller (PyPI)

Source: ossf-package-analysis 4b68fa52500e16cab90e8038ae96e2ba1be6c448a8caa40ab3e46dc6d3c26436 The OpenSSF Package Analysis project identified 'kafka-roller' @ 99.0.0 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in @dransay/address-validation (npm)

@dransay/[email protected] is a dependency-confusion probe claiming the internal @dransay/ namespace, not an identified public package. Its preinstall hook runs on npm install as node beacon.js and sends a DNS lookup and an HTTPS GET to db3klhbi6i9hark1kegg174t38h33b6wt.oast.site, using t...

Malicious code in online-header (npm)

Source: ossf-package-analysis 161e267d603ad6aae77c0c365e895c8e40538da2c09f746c2183124434509fdc The OpenSSF Package Analysis project identified 'online-header' @ 99.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in @digift/cli (npm)

Source: ossf-package-analysis 5508ba462afd4a4d6f311cca1a00d728ea27b8fe03a2fba93878a9fabbb7f309 The OpenSSF Package Analysis project identified '@digift/cli' @ 99.99.100 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...

Malicious code in links-3 (npm)

Source: ossf-package-analysis 870f8306aa2e95828fa2fdd771044248f7d5e8e715304b6818773620e5c7a1b2 The OpenSSF Package Analysis project identified 'links-3' @ 9.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ---...

Malicious code in linkedin-user (npm)

Source: ossf-package-analysis e782ae9b14ef40a792bc55c6f60693da134e9e77e9f74d07336fcd40de0dfbc4 The OpenSSF Package Analysis project identified 'linkedin-user' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...

Malicious code in linkedin-event (npm)

Source: ossf-package-analysis d3117b6de9634e8866bcc81a60b2d016dc3f6ad89a592ae3118460e5dacc6d31 The OpenSSF Package Analysis project identified 'linkedin-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in linear-airbyte-source (npm)

Source: ossf-package-analysis f2f93219b987eadd13a3db8af0914e4ccc9ea3d3fbf6f571e156e5e5861d25c6 The OpenSSF Package Analysis project identified 'linear-airbyte-source' @ 9.9.10 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in libxmljs2qwerty (npm)

Source: amazon-inspector 98e288816b28da06174dcb7d9315fb857fc7daf80f81a57de2fbe1b0a3419895 The package libxmljs2qwerty was found to contain malicious code. Source: ossf-package-analysis 2d91988ba951c71566b9b39a2279ab047bd3e9233e58720bf517d55bd2170fee The OpenSSF Package Analysis project identified...

Malicious code in lexicalutils (npm)

Source: ossf-package-analysis 74435494f223aa6bbba50c2e8e746a27b089ed5df8eabcb948a7bab06cc57e74 The OpenSSF Package Analysis project identified 'lexicalutils' @ 99.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in leostorm (npm)

Source: ossf-package-analysis 95e88b15902b8c65f58b9996af3a305c1c4f93f2c859262aa2e48d4aabba1a7f The OpenSSF Package Analysis project identified 'leostorm' @ 2.2.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ---...

Malicious code in kite-public (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in keystone-app (npm)

Source: ossf-package-analysis d1e499fbcaddce6bdea8ab5e0bf4a301d23b6db8e65cb2647376df41c9850cb2 The OpenSSF Package Analysis project identified 'keystone-app' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in kasms (npm)

Source: ossf-package-analysis 14c5473ed9f03eb3f97abf8cfe3a81e0296f61439e1a450546557140a154e714 The OpenSSF Package Analysis project identified 'kasms' @ 1.0.207 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. ---...

Malicious code in karemz (npm)

Source: amazon-inspector 0210683c3480535deb828dc6e3f758815b2a57ae4a50c37dca6443ad61623aa4 The package karemz was found to contain malicious code. Source: ossf-package-analysis 0ea2cd139758da9c9339894a56f0250a834c2fb01f4b25c9e398daef8c61c992 The OpenSSF Package Analysis project identified 'karemz'...