Malicious code in kresna-kue71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feccaadcae43f72e29e46f06b7e73e6d6cc89712361d7bf4b316bc8e8ae6a31b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-gandul75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f502e6ad0d19d31e3af2bfc49d1447a091009e3192aa538543c302620013564 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-wajit50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81f0eabc9e637c56bd5646b145e74b8c51887f8986f2ca4777a3305fb4887fd The package wati-wajit50-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flooded...

MAL-2025-50046 Malicious code in cici-kemplang36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4220e30241abfdb86914f3a80c538d73436d766bf7a322053d67f8da9a6933e4 The package cici-kemplang36-ruro was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

Malicious code in dewi-kembang44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c59c0069376d1195f0d35fdfd44ce33277a0602d1bd66b1eb386d5637707f39d The package dewi-kembang44-miaww was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that flood...

MAL-2025-51632 Malicious code in eka-jamblang10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb59b409dc52f8b4559b53bb9d91754c672f0251696e9ac949487a8dbc46dc2 The package eka-jamblang10-sukiwir was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-49365 Malicious code in dunnhumby-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b047f32f0323beace719a36eec364b2d804d556202950dae7942b04e2f2b09a The package dunnhumby-component-library was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in react-paypal-braintree-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebbf8ad1d1a557ec443c0f6ea58587954750259557188b27491cca78c7e9ea7 The package react-paypal-braintree-demo was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in faker-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2d88bf5533b182da36c514791c3e6841d83565d4d7f7065a09cdebddc2509453 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in mbed-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e37cade9ed9f558086d52e3d4d53a6892f73d271c38ea94d5c0dd25d2a2eee32 The package mbed-js was found to contain malicious code. Source: ossf-package-analysis 09a05d2a84ef02b428f1176efd59cabf7a0b1c55bf4b0d8a2ac97c681ada2d...

Malicious code in kubeflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3150469110dc3e3086ca34f822bec2df638b48510698b298219a1f7f402680c3 The package kubeflow was found to contain malicious code. Source: ghsa-malware dd99a9b554f60504a7d93b59d2a89050acc67db75c799deeacfa3b33019dd7be Any...

MAL-2025-49304 Malicious code in kubeflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3150469110dc3e3086ca34f822bec2df638b48510698b298219a1f7f402680c3 The package kubeflow was found to contain malicious code. Source: ghsa-malware dd99a9b554f60504a7d93b59d2a89050acc67db75c799deeacfa3b33019dd7be Any...

Malicious code in vulnerability-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48687 Malicious code in graphclient (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8522d59c3381b60fc748b14103e812659b6be95032a14775c42e4a14ac4b675f Any computer that has this package installed or running should be considered...

MAL-2025-48613 Malicious code in ark-experience (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3390fa937ce615a9cf2e911edd90f9f2e03376c02c4a2f1642d3c9a9fdd4f291 Any computer that has this package installed or running should be considered...

Malicious code in @aml-ark/demo-house (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e366f776aeaca182573ad2bf8f73e1d66803e0a13d1f4dc7f074f078b3cef347 Any computer that has this package installed or running should be considered...

Malicious code in vue-sfc-require-hook (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cfa99fb8cfe12fc2eeaa5922910fd5069600243483dcc96133e02c819e4d201 Any computer that has this package installed or running should be considered...

Malicious code in cloud-data (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 424f85d34d816976e9e4e9674c41801256f7db680cdc2c3ce4c5363bd81c876a Any computer that has this package installed or running should be considered...

Malicious code in naftis (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb1f0b6ee3c57373a787813a9b3df26e367df1e7f1601d9986d58a352c48fa49 Any computer that has this package installed or running should be considered...

MAL-2025-48600 Malicious code in cooler-loans-api-generate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14591c09547262270253b5ec14b726249679f72985f6e450ba0cf5198ee216af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...