308 matches found
Malicious Package
Overview mkto-flow-lookup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview langflow-api-chat is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview async-chai is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview @pumpswap-sdk4/metadata is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packa...
EUVD-2021-1154
Malware in sbrugna...
EUVD-2022-4767
Malicious code in bioql PyPI...
EUVD-2022-0924
Malicious code in bioql PyPI...
Malicious Package
Overview @sev-ui-verse/banking-models is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security
GitHub on Monday announced that it will be changing its authentication and publishing options "in the near future" in response to a recent wave of supply chain attacks targeting the npm ecosystem, including the Shai-Hulud attack. This includes steps to address threats posed by token abuse and...
Malicious Package
Overview dowloadebokgrundkurskunstlicheintelligenzbywolfgangertelr9sfy is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection...
Malicious Package
Overview @fastifyv4/fastifyv4 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview promise-with-resolvers-polyfill is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
Malicious Package
Overview texttweak-pro is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @zalastax/nolb-_tr (npm)
The package @zalastax/nolb-tr was found to contain malicious code...
Malicious code in @crabas0npm/velit-voluptatum-possimus (npm)
The package @crabas0npm/velit-voluptatum-possimus was found to contain malicious code...
Malicious code in down-lo-ad-now-zip-mp3-7211-chaos-and-creation-in-the-backyard-ovx5z-nuduuf (npm)
The package down-lo-ad-now-zip-mp3-7211-chaos-and-creation-in-the-backyard-ovx5z-nuduuf was found to contain malicious code...
Malicious code in npm-security-check (npm)
The package npm-security-check was found to contain malicious code...
MAL-2025-27843 Malicious code in npm-security-check (npm)
The package npm-security-check was found to contain malicious code...
MAL-2025-6800 Malicious code in sendbird-docs-validation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8e9f1e70bd8605ecac970f5651ab351d6560a0001119746388c77f590ba4d4 The OpenSSF Package Analysis project identified 'sendbird-docs-validation' @ 1005.0.1 npm as malicious. It is considered malicious because: - Th...