4240 matches found
Malicious code in teamstelemetry (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7838b0f51882af6cd99758551eec942e5c2abcd214ebe7c1e8b3c59dbece4224 The OpenSSF Package Analysis project identified 'teamstelemetry' @...
MAL-2025-6129 Malicious code in spring-context (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in jsr305 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in okx-dex (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in telenet (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in cloud-inquisitor (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea79d84d2d89107b5dd792c2461d11a8ef9f578ee835e3cc86a5913ef7269054 Any computer that has this package installed or running should be considered...
Malicious code in omulamuzi (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-image (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in protolab (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 395ceb17d3bf331597e101e685532b4af1d732b5ee31005221b0fcae61b97632 The OpenSSF Package Analysis project identified 'protolab' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in groq-mcp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f310f1669db9ce74e36d92085a6a67098f7c0ee086d8da5998b709d565a3fe12 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-6082 Malicious code in codex-action (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3768693d4c833924ee984473a49391e5c0e5778d627f2f7e16f1b565ac38104a The OpenSSF Package Analysis project identified 'codex-action' @ 99.3...
Malicious code in @ivy-shared-components/testing (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in mgz-testpkg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c82f0658f0d08613ec76f5066bad323001a5a95afc35b8befc4a34c82a68e0a7 The OpenSSF Package Analysis project identified 'mgz-testpkg' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in ngf-gov-hr-navbar (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85f2baa5c5673490af93199349e0ef54f7c581115b1fa83d6df2c9e18430e031 The OpenSSF Package Analysis project identified 'ngf-gov-hr-navbar' @...
Malicious code in realtime-demo (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25e65ca84d64481a7631998dd140a2b8cecaa7b5716bb71dc08ff53e700a10aa The OpenSSF Package Analysis project identified 'realtime-demo' @...
Malicious code in model-providers (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bc812776fc9ca2678deabf678d9dae58067e353d0d7131e35d68fa452ff57f5 The OpenSSF Package Analysis project identified 'model-providers' @...
Malicious code in handoffs (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in tw-core-ui (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware effb17ff1202bd8522ed8a37591dc22da8c39ed2554771c3566b2ac7d4e356f2 Any computer that has this package installed or running should be considered...
MAL-2025-6184 Malicious code in nbastatsleftnav (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 514ea2a983874eb46d5517a63e127b2503b1f9a0dc1ffa0a726e5f1dbd7559b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5757 Malicious code in os-apps-ui-traffic-manager (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cdf3d7006b0b2cb524eb3e2fb401636a3a58bd02e1f9296ba89d576397b8831f The OpenSSF Package Analysis project identified...