MAL-2025-35833 Malicious code in test-mlw2-muxes-misdo (npm)

The package test-mlw2-muxes-misdo was found to contain malicious code...

MAL-2025-35417 Malicious code in test-mlw2-glans-eaves (npm)

The package test-mlw2-glans-eaves was found to contain malicious code...

MAL-2025-36607 Malicious code in test-mlw2-wanze-burnt (npm)

The package test-mlw2-wanze-burnt was found to contain malicious code...

MAL-2025-36430 Malicious code in test-mlw2-tenue-irate (npm)

The package test-mlw2-tenue-irate was found to contain malicious code...

MAL-2025-35529 Malicious code in test-mlw2-holts-troad (npm)

The package test-mlw2-holts-troad was found to contain malicious code...

MAL-2025-36117 Malicious code in test-mlw2-rills-tappa (npm)

The package test-mlw2-rills-tappa was found to contain malicious code...

MAL-2025-39181 Malicious code in whiskey-date-nqcc (npm)

The package whiskey-date-nqcc was found to contain malicious code...

MAL-2025-38407 Malicious code in vinegar-walnut-ly0w (npm)

The package vinegar-walnut-ly0w was found to contain malicious code...

helper_project (1.3.0), twitter-buddy (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via requst (0.0.1-security)

requst NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on requst and may be impacted: - helperproject 1.3.0 - twitter-buddy =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-32121...

platzi-virtual-machine (1.0.0) potentially affected by unknown CVE via pvm (0.0.1-security)

pvm NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on pvm and may be impacted: - platzi-virtual-machine 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30899...

MAL-2025-36842 Malicious code in threeviz (npm)

The package threeviz was found to contain malicious code...

MAL-2025-10280 Malicious code in @zalastax/nolb-_oc (npm)

The package @zalastax/nolb-oc was found to contain malicious code...

MAL-2025-39934 Malicious code in xray-delta-vanilla-ltrdk (npm)

The package xray-delta-vanilla-ltrdk was found to contain malicious code...

use-rtg (>=1.0.1, <=1.0.3) potentially affected by unknown CVE via observed-bits (0.3.1)

observed-bits NPM version 0.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on observed-bits and may be impacted: - use-rtg =1.0.1, =1.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2025-28060...

MAL-2025-40743 Malicious code in zamia-quasar-iblz (npm)

The package zamia-quasar-iblz was found to contain malicious code...

MAL-2025-39278 Malicious code in willow-amber-bak924-project (npm)

The package willow-amber-bak924-project was found to contain malicious code...

MAL-2025-36298 Malicious code in test-mlw2-spart-dater (npm)

The package test-mlw2-spart-dater was found to contain malicious code...

MAL-2025-40945 Malicious code in zeppelin-xylophone-i2vr (npm)

The package zeppelin-xylophone-i2vr was found to contain malicious code...

memoize-with-leveldb (>=0.0.0, <=0.0.1), radio-paradise-api (>=0.0.0, <=0.0.1) potentially affected by unknown CVE via level-json-cache (>=0.0.0, <=2.0.0)

level-json-cache NPM version =0.0.0, =0.0.0, =0.0.0, =0.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25200...

brick-browser (>=0.0.0, <=0.0.14), brick-node (>=0.0.0, <=0.0.17) +11 more potentially affected by unknown CVE via new-struct (>=0.0.4, <=0.1.1)

new-struct NPM version =0.0.4, =0.0.0, =0.0.0, =0.5.0-alpha.2, =0.0.0, =2.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.2, =0.0.0, =2.0.0, =2.0.1 Source cves: unknown CVE Source advisory: OSV:MAL-2025-27369...