Malicious code in @zalastax/nolb-panf (npm)

The package @zalastax/nolb-panf was found to contain malicious code...

MAL-2025-23648 Malicious code in jasmine-vortex-znm895-project (npm)

The package jasmine-vortex-znm895-project was found to contain malicious code...

Malicious code in @crabas0npm/officia-omnis-laborum (npm)

The package @crabas0npm/officia-omnis-laborum was found to contain malicious code...

Malicious code in @zalastax/nolb-_wie (npm)

The package @zalastax/nolb-wie was found to contain malicious code...

MAL-2025-19093 Malicious code in easycrm (npm)

The package easycrm was found to contain malicious code...

MAL-2025-21945 Malicious code in groupmessagejs (npm)

The package groupmessagejs was found to contain malicious code...

MAL-2025-11600 Malicious code in @zalastax/nolb-glu (npm)

The package @zalastax/nolb-glu was found to contain malicious code...

Malicious code in js-shi3 (npm)

The package js-shi3 was found to contain malicious code...

Malicious code in leadconduit-webbula (npm)

The package leadconduit-webbula was found to contain malicious code...

Malicious code in iberia-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview @mddsfmsdflm/itemselector is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview cms-typed-promise is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious Package

Overview rimg-shopify is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview abacus-cmdline is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious Package

Overview @yandex-travel/eslint-kit is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview tazrim is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview ty-cdn is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Overview evolve-runtime is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious Package

Overview tinymce-codemirror is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview vfile5 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...