MAL-2025-43361 Malicious code in @zalastax/nolb-passk (npm)

The package @zalastax/nolb-passk was found to contain malicious code...

MAL-2025-45031 Malicious code in lingxing-zhilv (npm)

The package lingxing-zhilv was found to contain malicious code...

Malicious code in brave-real-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ec706dec762e96c2e6f2990c75a05808c5226fdd400419402135c910c5e639a5 The OpenSSF Package Analysis project identified 'brave-real-launcher' @ 1.0.10 npm as malicious. It is considered malicious because: - The packa...

Malicious code in authnd-client (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9da591ec2002916d80cd089745cfa963d18744916bf5db914f1fc0b14e117a5e The OpenSSF Package Analysis project identified 'authnd-client' @ 99.99.99 rubygems as malicious. It is considered malicious because: - The...

Malicious code in ganachee (npm)

The package ganachee was found to contain malicious code...

MAL-2025-42129 Malicious code in pp-react-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71193da54e6cdc258489d02db5987830a3bc147cbf9b43236f5757cab04f9c73 The OpenSSF Package Analysis project identified 'pp-react-grid' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41543 Malicious code in com.db.internetportal.es.olb-crossover-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d663acd7f33114b8fd15402308edcdbf8546ceeaf53aec128737ac8b324f4ead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-41722 Malicious code in pyswyfter (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41698 Malicious code in lyft-avidl (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview time-check-server-get is a malicious package. This package contains malicious code intended to exfiltrate data, and its contents have been removed from the official package manager. Although it appears to be a time-related utility, its main function is to collect system information and...

Malicious code in donuts.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd852600a317ae1df99af9e6cede53d3f54d36b9a400ca672eff6a7146818a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Palo Alto GlobalProtect App Windows 6.x < 6.2.8-h3 / 6.3.x < 6.3.3-h2 Improper Certificate Validation (CVE-2025-2183)

The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.x prior to 6.2.8-h3 or 6.3.x prior to 6.3.3-h2. It is, therefore, affected by an improper certificate validation vulnerability: - An insufficient certificate validation issue in the Palo Alto Networks GlobalProte...

Malicious code in tiktok-dev (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6914 Malicious code in bug-bounty (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in xenon-reef-csm442-project (npm)

The package xenon-reef-csm442-project was found to contain malicious code...

Malicious code in project-s4lhl-tangerine (npm)

The package project-s4lhl-tangerine was found to contain malicious code...

Malicious code in quantumfoam-stream-dagda-quasar (npm)

The package quantumfoam-stream-dagda-quasar was found to contain malicious code...

Malicious code in star-violet-rum512-project (npm)

The package star-violet-rum512-project was found to contain malicious code...

Malicious code in chalkk (npm)

The package chalkk was found to contain malicious code...

Malicious code in svenum (npm)

The package svenum was found to contain malicious code...