4240 matches found
MAL-2025-41303 Malicious code in knowpro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4050d9edab117029be58467368808cdb539f5d3b4dee8741011d5186c7c74766 The OpenSSF Package Analysis project identified 'knowpro' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in health-cards-validation-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83454ca0e6e018fdcd3684ad0e163a9220a0e5a2619ea5d348092076d83755e5 The OpenSSF Package Analysis project identified 'health-cards-validation-sdk' @ 99.0.9 npm as malicious. It is considered malicious because: - T...
Malicious code in mayfly-risk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf5840ba1f15b80e436a6737d86e95ddd24c73704e5895a2d43056f85394bd45 The OpenSSF Package Analysis project identified 'mayfly-risk' @ 10.13.0 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41371 Malicious code in bc-compare (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in bc-compare (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41405 Malicious code in react-event-tracker1 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41361 Malicious code in ad-react-wrapper (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dec7199df8eaf35c70facf6df3af78b3aa9b7d06d5cc4f2ba7ee9f528165d21a Any computer that has this package installed or running should be considered...
Malicious code in api-react123 (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41378 Malicious code in cwl_shared (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in package-level-3 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @navify-platform/http (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @navify-platform/env (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41355 Malicious code in @navify-platform/env (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41354 Malicious code in @navify-platform/auth (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in @wp-feature-api/client-features (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in canvas-ios (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-41426 Malicious code in @navancorp/icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00d23863df2bb18ff4d7478d9d974206ad5e1959e64da8883e6623a5747b4ad3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bitkub-next-frontend-v2/app-bitkub-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c961401f308dd3c2e7d4639158b0b6c5cf92dbdfcafb06789988dc4824107960 The OpenSSF Package Analysis project identified '@bitkub-next-frontend-v2/app-bitkub-next' @ 1.13.0 npm as malicious. It is considered malicious...
Malicious code in other-external (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4043d62490dcece68def76c783cdadf630e5b72829cffa35283867dfd60ff62 The OpenSSF Package Analysis project identified 'other-external' @ 20.1.1 npm as malicious. It is considered malicious because: - The package...
MAL-2025-41251 Malicious code in @navify-platform/idle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4c05f7983c6a597941a36c8177f63342feee29acb5d3922471e2fa25da4f159 The OpenSSF Package Analysis project identified '@navify-platform/idle' @ 2.3.0 npm as malicious. It is considered malicious because: - The...