MAL-2025-1705 Malicious code in accessbility (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1685 Malicious code in @aoflmkt/is-mobile (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1223 Malicious code in meeting-card-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 388fc50b22e2990c5b37bcc9737237040efb41310d241da7e2dbb65c85a3717d Any computer that has this package installed or running should be considered...

MAL-2025-873 Malicious code in system-driver-scan (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-871 Malicious code in starter-monorepo-microservices (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-863 Malicious code in pulumi-eks-hello-world (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-854 Malicious code in module-stub (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-836 Malicious code in hubspottoolsmenu (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-819 Malicious code in dealer-portal (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-818 Malicious code in cx-logger-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b28a94d9596485fc3cbfce584a9426d5bda8075bb0a4cb226482d7f6eccb35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-817 Malicious code in command-plugins (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-815 Malicious code in check-slip-chii (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-811 Malicious code in build-test-utilities (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-803 Malicious code in anton-downloader (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-791 Malicious code in addons-pm (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in theice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a5284ff23f0c6a6b960f00ae8adcf8fd068d714b2689229fa6355a69fc5d778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-528 Malicious code in lyft-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 315320431749982def4c72ea78c96ab88faead336d157234851073d549dd50b5 The OpenSSF Package Analysis project identified 'lyft-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-12083 Malicious code in lerna-monorepo2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 271f42aae85ac8961f1f78e8a64fb0a39eccde9c8d632a30fb8c1e03968d6d51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12070 Malicious code in yb2bacceleratorstorefront-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6b9ec48a872ef195c69f3ecee359b142d1f9bb683a236c67a0c96876efafd0 The OpenSSF Package Analysis project identified 'yb2bacceleratorstorefront-web' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2024-11820 Malicious code in orizuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d3a6a53ae9ab1e4e864e215c021d05bd012da8095848b26fa39a6b78d1db8cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...