MAL-2025-6008 Malicious code in os-apps-ui-curvelibrary1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d69bf54e33d46b564e56a260b65d3c9b8d3a7202dfec0feb06e2930c0bc53dce The OpenSSF Package Analysis project identified 'os-apps-ui-curvelibrary1' @ 12.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-5848 Malicious code in eslint-config-ivy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e1af1d02505f4566c424f21a111d21aab14a0af46e04316c0c84bd47c35a777 The OpenSSF Package Analysis project identified 'eslint-config-ivy' @ 99.99.992 npm as malicious. It is considered malicious because: - The...

MAL-2025-5845 Malicious code in workspace-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6337f633e71ac4bbdd2541a6ff172f67246451a691838940e3578c7c7ba4ee18 The OpenSSF Package Analysis project identified 'workspace-loader' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-5760 Malicious code in @blocks-shared/atom-panel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c591a20fbe6de7639db5ac559fbc7db95960967fb3eb809e6fe2f58943f4a75 The OpenSSF Package Analysis project identified...

MAL-2025-5761 Malicious code in npmrcetest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 741db95105cd1c34f5bd28fc99935de82e252d783d12600ba3f43ecd9c13d07e The OpenSSF Package Analysis project identified 'npmrcetest' @ 1.0.0...

MAL-2025-5759 Malicious code in os-apps-ui-creative-manager (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81c073683277444cc82216b47de3758bb6fc20065d1220076e08d5bd84270ad5 The OpenSSF Package Analysis project identified...

MAL-2025-5744 Malicious code in formatjs-internal-intl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93108c8da3931417e2009ddb17d45ffd86062e129a805a7ff62f3361780fd2d6 The OpenSSF Package Analysis project identified 'formatjs-internal-intl' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in stencil-module-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7b81d9bc05cb0363e0a13a4f3ec52001cae4fcb470f11f0973d186fa47271b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in titan-exchange-shared (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcbcec353cd72f56bcc238f2996606b61523a85e851d694e96012a54c027f606 Any computer that has this package installed or running should be considered...

MAL-2025-5314 Malicious code in puppetexplorer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ab86acd07919fde349edfeff50f7013fc28b45b00cbf8537a1f33ef5fa4d284 Any computer that has this package installed or running should be considered...

MAL-2025-5277 Malicious code in robinhood-internal-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5350c4af558b6036e996982e7ac060be1ac0516b91dfd7b983a5c0b5d76270ec The OpenSSF Package Analysis project identified...

Malicious code in justeat-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 577d8ffd11e5da3a5000b8a390c45c8474d2dd362e509a65a107f2b0df13e563 The OpenSSF Package Analysis project identified 'justeat-storybook' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-5264 Malicious code in @native-rabobank/native-qr-scanner (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b17e7bdb26521a7b7e638054ce600a2db0fba3fe05b08edc51b7236581947c1a The OpenSSF Package Analysis project identified...

Malicious code in fooldependgcbk8x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40edfccd147dc478664b7c35428ddcc41628c4bd8d11341b39de5092cf1ed958 The OpenSSF Package Analysis project identified 'fooldependgcbk8x' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-5216 Malicious code in strict-csp-builder (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e42c1e63ff88dae30df638aa554602cf21df6606f31d9476c8b00d28881777d5 Any computer that has this package installed or running should be considered...

Malicious code in test-package-vans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 27c1fc3b6a086e894434a4bb93a7280083831b719de5259c00fa388ac3e4c1f4 The OpenSSF Package Analysis project identified 'test-package-vans' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in worldhello (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c09616d1a3cf63c69efe5b81863fee024898fd16025a96efa3e70504012bb6bd The OpenSSF Package Analysis project identified 'worldhello' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package execut...

MAL-2025-5002 Malicious code in studiospanelopsweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39109af2544b22484679e1ee9e8dccfc530166cbf409082b00c9ac4973669e46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5172 Malicious code in idse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 869cc34e50a9769a40adaa64071f9f2d1b86bd17671c26b2a790d2b72089dddf The OpenSSF Package Analysis project identified 'idse' @ 1.0.10 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2025-4975 Malicious code in arc-offsec-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10c818d61d5a433e8603351eaeaa1329d8a7365d5c6b8497143cf7c8e5c1f9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...