Malicious code in mi-permission (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in @jito-lab/provider (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5024 Malicious code in asf-core (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in cycle-a (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in 0vulns-dependency-confusion-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d282025fb2ec1b4012e3b979cec1f66520e643fcadfd2864e54989de50dd00d The package.json preinstall script runs wget against an attacker-controlle...

Malicious code in volehai-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 695b1f1647ff88855017c178d47ab04527b14c3817e9b4ed343c1220cc7b18df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dm3-org/dm3-lib-crypto (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in mtrtestinglalalal (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in react-server-dom-fb (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3de60ce6ee796258f00f8278b01f38d42a0db62601e38791bd2ab9a1b20cbdeb Any computer that has this package installed or running should be considered...

MAL-2025-4718 Malicious code in pay-reconciler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2ebf90fee62eaa35da095882fe22a5cc2163801652334e5441101fb02a336b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ml-payment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b15f383166aad3ae73303a775a513a1ea7c14f763d168d6dc1eb971abf0cd0e Any computer that has this package installed or running should be considered...

Threat Intelligence Sweeping now supports container security telemetry data

Threat Intelligence Sweeping starts to support sweep container security telemetry data. Users can now use the TI tool to identify possible malicious activity in their container-based environments. The trigger events are visible in workbench alert...

Malicious code in moonpay-demo-integrations (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

CyberData 011209 SIP Emergency Intercom

RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial-of-service condition, or achieve code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation...

MAL-2025-4670 Malicious code in world-id-lens-dapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d27d63976b7108297f8d9a29062b3add9973c83849fd5ab7cd8fbd31b0248701 The OpenSSF Package Analysis project identified 'world-id-lens-dapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in scout24 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b242bd481e8c1d33c1fd6c0237e483642705a31e0b42c50dae0d75f8ca4c7e69 The OpenSSF Package Analysis project identified 'scout24' @ 1.1.1 npm...

MAL-2025-4748 Malicious code in kakao-pixel-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in csp-bypass-poc (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in cspotcode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2130be6b5e619ba165a6aece5d32fbf21121d999dea65d83d80d4464db4b1ce Any computer that has this package installed or running should be considered...

Malicious code in fatfingers-mybigpackage (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88e4a0b4467183a638b6bae4c3739d660c18ac89afd44874a38e336354b09f0d Any computer that has this package installed or running should be considered...