MAL-2025-6650 Malicious code in processes-widget-fe-commons (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6630 Malicious code in lint-staged-custom (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview vite-log-plugin is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview vanilla-cacher is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview react-stylizer is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-6778 Malicious code in vortigawe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious Package

Overview db-connections-templates is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

MAL-2025-6261 Malicious code in prysk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80bd771f9c6b2d96fa94413e45d0d2ddeb084b6ea58d6b3a7430624821398409 The OpenSSF Package Analysis project identified 'prysk' @ 10.0.1 npm ...

MAL-2025-6254 Malicious code in redux-init-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 809037af01cffcba162d81c526169fdcd7f41666c56006a5740cc9316c085587 Any computer that has this package installed or running should be considered...

MAL-2025-6257 Malicious code in redux-saga-channel-end-rce (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0589385f2129597888566dad88dd9ad6b4d8d566e7fbd30afe2f94f1cf913b0c Any computer that has this package installed or running should be considered...

MAL-2025-6237 Malicious code in gafana-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4e648e988f33de6b085bf631d45494adb7b9be241071b454c40705384ad7e6e The OpenSSF Package Analysis project identified 'gafana-test-utils' @...

MAL-2025-5991 Malicious code in lunasec (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52ffe1d0846a694f3b7e75d9064515e2cb7a42074ea0b54d8077d5bdb0cf3993 Any computer that has this package installed or running should be considered...

MAL-2025-6206 Malicious code in igshared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42c9fa002fd890335fcbf32309ed3d7d078d7ccffd8b3da6c1e2836b5f522db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6104 Malicious code in matka (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-5754 Malicious code in @frontend-clients/wallet-web (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a1c436afb2775f8924af545aabce47a320ce8cab9c12dce05ed9e922a67d456 Any computer that has this package installed or running should be considered...

MAL-2025-5818 Malicious code in playwright-e2e-testing (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1947219a5f6bf4374f28676075008bd3dc532f9ffde90b285e73fcd418a198c4 Any computer that has this package installed or running should be considered...

MAL-2025-5651 Malicious code in @laredoute/design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e56fdae15fb0b525a4212e71ff9dd4ec7cd0e3f4076552ec379c49c8f4a4e899 The OpenSSF Package Analysis project identified '@laredoute/design-tokens' @ 0.1.55 npm as malicious. It is considered malicious because: - The...

MAL-2025-5645 Malicious code in notificationsandbox (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3e790882c7a117c75a3069325812c59c0c156533df2e6e4a1831adf1ea7710e Any computer that has this package installed or running should be considered...

MAL-2025-5615 Malicious code in auth0-app (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bb8364e4a661d732190dea931ee1bd3aedea3c1005b1daa41507601bb281443 Any computer that has this package installed or running should be considered...

MAL-2025-5595 Malicious code in oft-evm (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware def6b1ca6cf833bd60869e2d69ad50ccb4916998a60f302f0ad89bd0076da661 Any computer that has this package installed or running should be considered...