MAL-2025-48460 Malicious code in moloch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b1031cde1246782696826dc75e577185deabe22db26d409930d94dc254b2232 The OpenSSF Package Analysis project identified 'moloch' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2025-48509 Malicious code in src_index_ts (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69ae49816d96bbde1aa23dd8285270956273b0026f724d325d2daed22c08b966 Any computer that has this package installed or running should be considered...

MAL-2025-48500 Malicious code in internal-native-buy (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @institute-of-data-management/n11-chatbot (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48481 Malicious code in api_halodoc (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48498 Malicious code in internal-config (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in deere-ui-namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac60fab9b04ceb2a6e45e76986b8fa08dcb797e40cb4d7b88cb5d16cfbeec85b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48446 Malicious code in deere-ui-namespace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac60fab9b04ceb2a6e45e76986b8fa08dcb797e40cb4d7b88cb5d16cfbeec85b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48443 Malicious code in deere-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355a3e4ff7770ab39aebef0eb84829ba45685d6fe842518c585de20021b505f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in company-browser-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7621dd08044aeaacb68745078c793611d91031eb9852f8f667f739d485efe939 The OpenSSF Package Analysis project identified 'company-browser-package' @ 99.9.10 npm as malicious. It is considered malicious because: - The...

Malicious code in arno-baidu-test (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-48483 Malicious code in arno-baidu-test (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in spot-electron-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48313 Malicious code in vue-analytics-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6264af628cc0d76e732dffe05db10a0bd52bcffaad0549e986349c8fc542cf79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in optional-native-module-abc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...

Malicious code in vercel-v0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b3f5d72ec9c31838366e2e5e38f08021d40aa495b4424e97ff5b580a24467d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48089 Malicious code in v0-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df1e83b15c1e9db5fa8cf65392f9f91ac878f30e714c3ecba2b4875a99512281 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v0-next-shadcn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5e9e552239df0cdd60e60db1ee3aa37558a7ae490767639b25d3932079c8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48361 Malicious code in eslint-plugin-custom-msal-w (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e152a7488bd0f7129231f38c46e92a0a1163247faac591a269193b2b08231736 Any computer that has this package installed or running should be considered...

MAL-2025-48355 Malicious code in card-present-integration (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2787c28c7a94244ac05702adeee73ed4e9d417fbb8f17ac667c50d19180340f1 Any computer that has this package installed or running should be considered...