MAL-2025-324 Malicious code in built-with-workers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f426ea9ad545f39f1e84cd26ee384b096d08c2b82f8b3554f97fc1ce85fac83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-267 Malicious code in tr46mine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d941efa6b0b6b2ec8beb148535517722510f96ac8bb2f5fde58650fe7b542342 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-266 Malicious code in extendmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12e7e774dc448f84f9b89b418d844c730e99dcd9797f87977a008d2bbdf92ed7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jpl-branding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 824ee6168e9d4e1ba52afc1563863a7b79255495e7975e54013eddac8de94875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-22 Malicious code in @vf-org/smapi-js-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb778953ccadf1ddd3d3249677a4b7c27133ddd85d451ebe6cf0e04611264b86 The OpenSSF Package Analysis project identified '@vf-org/smapi-js-core' @ 8.2.10 npm as malicious. It is considered malicious because: - The...

MAL-2025-19 Malicious code in nativescript-gainsight-px2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12143d1c19f403559d49925266742f6b2ca75a3fda8ed195a4e0189bf64dce70 The OpenSSF Package Analysis project identified 'nativescript-gainsight-px2' @ 1.11.3 npm as malicious. It is considered malicious because: - Th...

Malicious code in react-release-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3056b390e6fea55432a197cca0d614e66de98058a3e4b6087a547a66327ee6c5 The OpenSSF Package Analysis project identified 'react-release-manager' @ 1.1.3 npm as malicious. It is considered malicious because: - The...

MAL-2024-12069 Malicious code in squirreldisk-tauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21b61244e5ef1dd2b28d94395ad515353e3bcf1c00f2629376c95305ca4323e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11925 Malicious code in com.unity.assetgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dee635c5dd8d8b009c47b1924e679ac0f95c83a41bbff41ff4d9978f75dae3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11922 Malicious code in blz-internal-pkg_update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c0576719ed89c86b80e8064de18e089618752aa208fa88dfc410ad73e84bf8e The OpenSSF Package Analysis project identified 'blz-internal-pkgupdate' @ 7.7.11 npm as malicious. It is considered malicious because: - The...

MAL-2024-11913 Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2024-11895 Malicious code in pai-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b6dc3e380e435ff7d74a44ec8841c1577a1bd74c03ef3dc368e2514e485d8fc The OpenSSF Package Analysis project identified 'pai-web-components' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11875 Malicious code in asymmetric-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-11870 Malicious code in bsc-genesis-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11858 Malicious code in orderly-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6d1816f12ad3d52d2229d938ccf0f5ec2b0f48ba66613c031b72631e23cc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11841 Malicious code in graphql.vscode-graphql-syntax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d28da17294cea5d68bf358dd4576cf98bbc3d373b4add618e2c56ab5c18358 The OpenSSF Package Analysis project identified 'graphql.vscode-graphql-syntax' @ 99.99.99 npm as malicious. It is considered malicious because:...

MAL-2024-11836 Malicious code in action-mattermost-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff777c42ea9a589391478ecfd89da15137033e8ce5e0961b26f277f6e055c70e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11872 Malicious code in casino-luzern-easter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e48867ff5b177606a9ae5bcb27cf273c464b77b0ac518170e08739c0f3f8f80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in casino-luzern-easter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e48867ff5b177606a9ae5bcb27cf273c464b77b0ac518170e08739c0f3f8f80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11787 Malicious code in anumanu2324 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4968a40c8a0664918114879119462d46034747809e1dfae1d03748017f9708 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...