137471 matches found
Malicious code in @ra-ide/system (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce07a8994cd7d28965c3fdec8cba35203da851f19964d8ae6e2be5f754a8132 The package @ra-ide/system was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in @ra-ide/logix-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-190593 Malicious code in @ra-ide/logix-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198325
Malicious code in @ra-ide/source-code-frontend npm...
MAL-2025-190594 Malicious code in @ra-ide/source-code-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b026a3f908a4875695a81716cd5056c2991f150b9661187eeebd42cdc8577b The package @ra-ide/source-code-frontend was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198326
Malicious code in @ra-ide/tag-editor-frontend npm...
Malicious code in @ra-ide/code-editor-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39784fd9275723725034c0f9fcb2df35d06963659572a3aeaccd51e3a5e07e61 The package @ra-ide/code-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198331
Malicious code in @ra-ftds/ra-flourish-design-tokens npm...
Malicious code in alicenpmpocpackage (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158edf3777a6df259583332b3694508454333d6643c7eb04eea85176ba9df724 The package alicenpmpocpackage was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-190585 Malicious code in expertsvc-onboard-offboard (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6d7a1267ed4ecc6a46b548be6778e2f198c0ec5629953d3e9e6a79e1f213df The package expertsvc-onboard-offboard was found to contain malicious code. Source: ossf-package-analysis...
EUVD-2025-198289
Malicious code in @kiwiiw/ez-lib npm...
EUVD-2025-198246
Malicious code in com.unity.polyspatial.xr npm...
Malicious Package
Overview just-a-calculator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2025-198248
Malicious code in just-a-calculator npm...
Malicious code in hellospa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...
CVE-2025-65025 esm.sh CDN service has arbitrary file write via tarslip
esm.sh is a nobuild content delivery networkCDN for modern web development. Prior to version 136, the esm.sh CDN service is vulnerable to path traversal during NPM package tarball extraction. An attacker can craft a malicious NPM package containing specially crafted file paths e.g.,...
EUVD-2025-198146
Malicious code in alicenpmpackage13 npm...
EUVD-2025-198144
Malicious code in alicenpmpackage1 npm...