MAL-2025-51497 Malicious code in dewanto-peyek52-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f11232512f3a11f213e30345785f41f2bd5174519de55a5af81695ab88719970 The package dewanto-peyek52-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that...

MAL-2025-49879 Malicious code in bayu-sambel32-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff23e9ab19239bd173aa28b38c261dbfb9666dcb94c7779cad01e6134ec0ffc9 The package bayu-sambel32-breki was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...

MAL-2025-49371 Malicious code in tailwindcss-setgrids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cf6bb0e9fdf4dacf7dcecfc3cf72eacedce92607c3e18ca8a6ea02c618b9a5 The package tailwindcss-setgrids was found to contain malicious code. Source: ghsa-malware...

Malicious code in @bbkkfkk/pre (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9c1f8ea16f76d6d90b7428b1448704b5b42f2db84e96945cc9c85237013060e The package @bbkkfkk/pre was found to contain malicious code. Source: ghsa-malware 18fa96a25503e48ec0ab99b483a5e7c4c8acd355e03c509295d39daf6509b21a A...

MAL-2025-49361 Malicious code in react-notifications-alert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fbe66f8e85ad0ad7c2682e9640e0f2a48344bcef9beeaa8de12e5e687744acf The package react-notifications-alert was found to contain malicious code. Source: ghsa-malware...

MAL-2025-49360 Malicious code in node-xpnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f358100a356075faa746b4929e5c4afd67b681e4fd85dd4e8d570af09aae4da The package node-xpnav was found to contain malicious code. Source: ghsa-malware ecad27e5e27726e4839a252c295fcd6d7a77504b7f74944706a47f7bb2a715cb Any...

Malicious code in telegram-bot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c6146ccba5593f3f123cbe20b94fd9df9d168c3e4614e5bf93a1fdd8e96fc7d The package telegram-bot-starter was found to contain malicious code. Source: ghsa-malware...

Malicious code in cordova-plugin-globalization.moment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431a9d9edd37d8a5dc80555f3c56e275f5c79162ed66ae419cc7b2450c6ad75c The package cordova-plugin-globalization.moment was found to contain malicious code. Source: ghsa-malware...

Malicious code in lion-based-ui-labs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402aef950dd8db7a0a6a3a29bf2658df3695836e4ccd542400e331b1b34e5a28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48971 Malicious code in @msdyn365-commerce-marketplace/tax-registration-numbers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71449dcdb918b9b8c54b5420fd4cd57a99e84a172a53b0725bb39e1f6591b7bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gitlab-lsp/workflow-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77c05dd20ff8e2d3c07051d2f1146ac86522b9a72a6964e27122c9dd02d4c7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pensions-portals-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9025d84d3de41f55102920c25c5229e8104e159e23a3e943a7e955077ae61403 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48979 Malicious code in airbnb-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bdd7ff1ebc82ab66444ee41ee81408d4c29440e9a5662b9d11c4734d8a3a0c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49049 Malicious code in transform-react-constant-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d582d56f1f42a97702c2557fbfdcc90613da53d18adf5494b4f18c555c04398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48926 Malicious code in four-sdk-aes-ipheriv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d8d19d191eddc67d0a2a9f1987b679d130fc16751d12748f1412508aa114dd The package four-sdk-aes-ipheriv was found to contain malicious code. Source: ghsa-malware...

Malicious code in dhpgemrdhs51214 (npm)

The package dhpgemrdhs51214 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-48731 Malicious code in ldhpgemrdhs94006 (npm)

The package ldhpgemrdhs94006 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in gamenodev21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eed42bff5f057d49a644923b46ba868c04890e51c77dffc911c3aaa0be4e0640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48753 Malicious code in puppeteer-jest (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b344f7f7f48bc61a2216808c72e518be94a33da9dac41acba0de196d228384 Any computer that has this package installed or running should be considered...

Malicious Package

Overview ab-testing-for-wp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...