MAL-2025-42122 Malicious code in @flight-common/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10b5cb816f030297707c6e9ae79f7916de698fd58c8b068b18ef716c7425240b The OpenSSF Package Analysis project identified '@flight-common/components' @ 1.2.9213 npm as malicious. It is considered malicious because: - T...

Malicious code in xpoc-ts-lib (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6aabe2bdc2f87978954e778f491ee06641df1ca2ebdce2b151881f7b8c7c063 The OpenSSF Package Analysis project identified 'xpoc-ts-lib' @ 99.0....

MAL-2025-41338 Malicious code in typescript-5.6 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a01fda83028ac81fadc186832f18036fcd0c30fdddd56887177a977e57ad5e1 The OpenSSF Package Analysis project identified 'typescript-5.6' @...

MAL-2025-41339 Malicious code in typescript-5.7 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 689bcb9e8006cbddd0e9e75fb20e15aa8eed88e80f083873b7e694b997d62e58 The OpenSSF Package Analysis project identified 'typescript-5.7' @...

Malicious code in typescript-5.7 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 689bcb9e8006cbddd0e9e75fb20e15aa8eed88e80f083873b7e694b997d62e58 The OpenSSF Package Analysis project identified 'typescript-5.7' @...

Malicious code in rushjs.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d99306a850859fbf00f66d5e98426eded1c24eeb8f7b5e60f3255e4ad09c661 The OpenSSF Package Analysis project identified 'rushjs.io' @ 99.0.9...

MAL-2025-41319 Malicious code in remark-canonical-link-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b975fb6f22bd9fcdcea9c2ef29c6fadc73269624920351490d8cda8e561199d The OpenSSF Package Analysis project identified...

Malicious code in rehype-headerless-table-plugin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f663df30b939e46c2ebd664fc1dae15c177895427b67b8b2b3d646b000bc64f The OpenSSF Package Analysis project identified...

Malicious code in msalv2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cca3fbaf2aacbd857c8661a88233c1a756fd75c6f60d675a32374d9c95cc019e The OpenSSF Package Analysis project identified 'msalv2' @ 99.0.9 npm...

MAL-2025-41313 Malicious code in oracle-agent (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9d5212e69633af1e55a9b35fa8e007e2b50c2905c3549e44f047e8ab061e157 The OpenSSF Package Analysis project identified 'oracle-agent' @ 99.0...

Malicious code in package-extractor-test-03 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f546d25f789caac055c54a1973c81e1df6ce7b9aa1f11b33f42f8a3612a7652d The OpenSSF Package Analysis project identified...

Malicious code in montage-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 285d4d62fe8147f0b104cedb1c1bc54ecc1a11483fb2240f89369ddd2de3b7d3 The OpenSSF Package Analysis project identified 'montage-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in list-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a276cf4b05366ccbd6833fab14810e95cdcb847d5c8edea81d505e0f39f4ca7c The OpenSSF Package Analysis project identified 'list-agent' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in heft-parameter-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6082dd30329215006112f50c3006a58f4437a48913646c4551e68d48e2d768e7 The OpenSSF Package Analysis project identified 'heft-parameter-plugin' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in heft-minimal-rig-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0a085da2f08feb8c00f2c512e03267a7ecdf55cb417d1d0cdb1f663604f95119 The OpenSSF Package Analysis project identified 'heft-minimal-rig-test' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

Malicious code in invalid-polyfill-boundary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0fbf998b1c11f6a785806e2ab4f0bbbc4da9a95e803f643a497d41215484a11d The OpenSSF Package Analysis project identified 'invalid-polyfill-boundary' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-41289 Malicious code in health-cards-validation-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83454ca0e6e018fdcd3684ad0e163a9220a0e5a2619ea5d348092076d83755e5 The OpenSSF Package Analysis project identified 'health-cards-validation-sdk' @ 99.0.9 npm as malicious. It is considered malicious because: - T...

Malicious code in heft-example-lifecycle-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fce75dcff1360927b5ed18017c2b53424afe03e0c1f53f13505883d9fe23fd55 The OpenSSF Package Analysis project identified 'heft-example-lifecycle-plugin' @ 99.0.9 npm as malicious. It is considered malicious because: -...

Malicious code in doc-plugin-rush-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a12c396a6086d8e62fcd6527bd6c4056f50c8def8a668f50a021b0c73a3291be The OpenSSF Package Analysis project identified 'doc-plugin-rush-stack' @ 99.0.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-41269 Malicious code in @listr1/prompt-adapter-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 62c9103dcee0afbfa63c69bae22ac8f4e415daef3fcb2610b84d8278b1732f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...