4240 matches found
Malicious code in moonskin (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6910 Malicious code in advanced-korean-search (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
MAL-2025-6912 Malicious code in android-app-promotion (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in rush-plugins (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in merlin-transformer (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6956 Malicious code in snapchat-snapnet (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in dpais-chat-template-pwa (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc The OpenSSF Package Analysis project identified...
MAL-2025-6923 Malicious code in dpais-chat-template-pwa (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d39545ec9be8c0beabaaf1f508b0f468a884898b3fb8b8ae6d73b5cb62c54fc The OpenSSF Package Analysis project identified...
AVEVA PI Integrator
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, or upload and execute files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities, such as:...
Malicious code in tiktok-internal (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6860 Malicious code in tiktok-internal (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in mgtyler (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in gridlock-web (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6840 Malicious code in gridlock-web (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in zylker-eclassifieds-ui (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in localeslice (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in zstd-jni (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6861 Malicious code in zstd-jni (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in exoscale (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-6816 Malicious code in teste-depenconfu (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56a7fcb8d17544bc05d4a5222d7741781d9b33d6ad5d334d6c74b8851d20a257 The OpenSSF Package Analysis project identified 'teste-depenconfu' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...