Malicious code in test-account-portal-fe (npm)

Source: ossf-package-analysis 5dd02103458df4faa2c37da43a76a468a0a22d591fb77c5d756e7d7496d68907 The OpenSSF Package Analysis project identified 'test-account-portal-fe' @ 100.100.102 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in kmf-i18n (npm)

Source: ossf-package-analysis c506e33bdce28606141b7d2bbebbae50e97e466ab04664a9cca8fa48a3622ae1 The OpenSSF Package Analysis project identified 'kmf-i18n' @ 100.100.102 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity...

Malicious code in @fer2809fl/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 333123c7c0137131633b11cc8a16d12db3c3755f41965453297ff01e2dcc44c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17750 Malicious code in @fer2809fl/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 333123c7c0137131633b11cc8a16d12db3c3755f41965453297ff01e2dcc44c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-17751 Malicious code in cloud-baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ee1c98d68a84e021c6be18dac81c672b3d0f36fcdde105992c46beab9d8d7bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview pahinuy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview asepxyz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview asepxyz12 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview asepxyz-signal is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview asepxyzz is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview @galicia-toolkit-nestjs-20-lite/archetype is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview @galicia-toolkit-nestjs-20/archetype is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

Malicious Package

Overview @tvg-mar/storyblok-bridge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview @galicia-toolkit-nestjs/archetype is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview asepxyz-eslint-config is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @brick-v2/form is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @tvg-mar/promos-context is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...

Malicious Package

Overview @brick-v2/brand is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @galicia-toolkit-nestjs/commons is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious Package

Overview @tvg-mar/promos-gtm is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...