236612 matches found
MAL-2025-192459 Malicious code in libxmljsololo3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d1f93ba15e7b1dea2fd731f26d04e13c7ff43da48e5ec7921dfd34cb94879a The package libxmljsololo3 was found to contain malicious code...
Malicious code in fadafas3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16f81b34db67e90a673703108039c5943f614e1a8200df3fb04eb6677ee95f15 The package fadafas3 was found to contain malicious code. Source: ghsa-malware 27efb5c05f9bd8cab5dd8d9a89240e7e1f353ecc21639fec01a91ebd8461cd61 Any...
MAL-2025-192462 Malicious code in libxmlpupupu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6137dbf72252f12fd82d8b02ae9d8270288badd33f0e5324b78e1be1b349180a The package libxmlpupupu was found to contain malicious code...
EUVD-2025-202908
Malicious code in libxmlfinal3 npm...
MAL-2025-192434 Malicious code in @cheqplease/structured-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f4111b892bba0089b3619c99cd5135fa3693d4a78c790a23017e359beff0cd8 The package @cheqplease/structured-logger was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-202418
Malicious code in mws-common-ui npm...
MAL-2025-192429 Malicious code in yunxohang3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e673bf41f2c09d7193d10d854da05f9ca7460ff6ea0aa7f20c54637ec8be6 The package yunxohang3 was found to contain malicious code. Source: ghsa-malware 0900450d580a55eafca9c4f9d12f2d00bee5c44547a809c1bb9f919b328f6350 Any...
EUVD-2025-202395
Malicious code in yunxohang3 npm...
Malicious code in yunxohang3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c2e673bf41f2c09d7193d10d854da05f9ca7460ff6ea0aa7f20c54637ec8be6 The package yunxohang3 was found to contain malicious code. Source: ghsa-malware 0900450d580a55eafca9c4f9d12f2d00bee5c44547a809c1bb9f919b328f6350 Any...
EUVD-2025-202396
Malicious code in yunxoahng2 npm...
Malicious code in yunxoahng2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590cb2c888056f49872da23301bfc59ab2eab0b221cd551f2074bdb586e765bc The package yunxoahng2 was found to contain malicious code. Source: ghsa-malware 0f8f5e6fad408a138d25de919d714b42202c0c57ad1b5d32200f17f4fe3e31af Any...
MAL-2025-192428 Malicious code in yunxoahng2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590cb2c888056f49872da23301bfc59ab2eab0b221cd551f2074bdb586e765bc The package yunxoahng2 was found to contain malicious code. Source: ghsa-malware 0f8f5e6fad408a138d25de919d714b42202c0c57ad1b5d32200f17f4fe3e31af Any...
Malicious Package
Overview real-time-tweet-streamer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
Malicious Package
Overview near-fast-auth-signer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-192420 Malicious code in near-fast-auth-signer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ca901df252a441f9253e1a56812e262f6c7282f53587866710310fa282394c The package near-fast-auth-signer was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-202380
Malicious code in near-fast-auth-signer npm...
Malicious code in vue2-amis-custom-widget123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 027b467c811b36f60dc7589ccd8251ffc56de7f40345d6a471a3a550a2a8df7e The package vue2-amis-custom-widget123 was found to contain malicious code. Source: ossf-package-analysis...
Malicious Package
Overview meteor-developer-oauth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...