4240 matches found
Malicious code in cooler-loans-api-get (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf5016290eaec4debcd0e35dda5e684927f8e80c05f9ca16252c71ea8cca6de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wpe-php-compat1mm (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in internal-links-autocomplete-id (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in hyatt-avatar (npm)
Package collects system info and sends to untrusted server, plus suspicious install scripts indicate malicious behavior. The package communicates with a domain associated with malicious activity...
Malicious code in hyatt-album (npm)
Malicious package does system info exfiltration, arbitrary code execution via install scripts, and a suspicious version number. The package communicates with a domain associated with malicious activity...
Malicious code in hyatt-residential-roster (npm)
Package is malware. Collects and exfiltrates sensitive data to an external server. Suspicious install scripts execute the same script multiple times. The package communicates with a domain associated with malicious activity...
Malicious code in duckduckgo-eslint-config-poc (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-48748 Malicious code in o3-storybook (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de89e5dde2144657ab48e71c00e9630b08d5d29e6a86daf29f7ce46d3380b18a Any computer that has this package installed or running should be considered...
MAL-2025-48765 Malicious code in tps-lookup (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73fc3e3810086149d54c3870a4fc1976c9868f6995217b2b6e1db7bb7d20cf0e Any computer that has this package installed or running should be considered...
Malicious code in purchases-roku (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c429e2a2e9aa0a6cda588f67e61e21c1830f469ed3a4b29f17845326869ba2be Any computer that has this package installed or running should be considered...
MAL-2025-48557 Malicious code in demo-bike-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c9ef89d7c326b74bbab220d2d159df0e002f04d0379ce022ddad517f9b023d3a The OpenSSF Package Analysis project identified 'demo-bike-store' @ 2.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2025-48685 Malicious code in gitlab-accountid (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-48762 Malicious code in shutterstock-cli (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293a07df288218d171e1132e93d24e0f6e75160174cf78ef8589073b1e7eb72a Any computer that has this package installed or running should be considered...
MAL-2025-48764 Malicious code in test-all2 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in infobip-calls-showcase (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7a032e7c75c74d99948394ea2e689b4b0c7d679a0bec3adcf6f869a27cda5c0 Any computer that has this package installed or running should be considered...
Malicious code in global-utils-helper-2025 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-48684 Malicious code in garud-production (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in shiprocket-invoice-export (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-48738 Malicious code in local_shopping_cart (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5357126837d84ed1343aac08c62d03ffcf34e1c8a78b7fa51af74852f46efce9 Any computer that has this package installed or running should be considered...