308 matches found
MAL-2025-1550 Malicious code in bqtop (npm)
This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 981f095c01601ef6fde53de3f74ea4bcd30cb63f9467bf1006c4563c033a83f4 Any computer that has this package installed or running...
MAL-2025-1461 Malicious code in archon5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49f96513d49b650de14afd8f58eb7a9af6e3f48e3af96d2fff186b24b49aa28d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1383 Malicious code in rust-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f080c05d4a8b07c42704d1ef9fb6f6d30d4128e3f5976f6645a3b8858cb10580 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-892 Malicious code in zapzaperson (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-889 Malicious code in x509-escaping (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-838 Malicious code in ig-grunt-release (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-787 Malicious code in @volcenjine/veplayer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-781 Malicious code in @toloka-annotation-studio/app (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-742 Malicious code in isctf4 (npm)
The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9aa3ab73f09ab46f718934ee549dde163b232a5e7b76a90a95aab9dc738370a4 Any computer that has this package installed or running should be...
MAL-2025-591 Malicious code in theice (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a5284ff23f0c6a6b960f00ae8adcf8fd068d714b2689229fa6355a69fc5d778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-555 Malicious code in meli-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95f626385442495ffbfeb51de2392e389f8b69da723a133025f2ce302f513b4f The OpenSSF Package Analysis project identified 'meli-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-377 Malicious code in amazon-db (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2f3fdc024f82b11d080d27e18dfe206e477583ec84c8f2268b9e275c9bb36d7 The OpenSSF Package Analysis project identified 'amazon-db' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2025-134 Malicious code in dbximgs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a752546905d1373f7b092a98454b7ca4e820bebecb1af358ce0a6a72fa9a1e8 The OpenSSF Package Analysis project identified 'dbximgs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicat...
MAL-2025-29 Malicious code in cursor-shadow-workspace (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c0d7191f53edcbd6d8459f64259fb12d6390bc73fffef3e045a073875f0f91f The OpenSSF Package Analysis project identified 'cursor-shadow-workspace' @ 1.0.2 npm as malicious. It is considered malicious because: - The...
MAL-2024-11929 Malicious code in @rrvis/ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis feaaf40ea5d1af97c31051295c594dc2344a3337d6b9aba3e9ae1ed6451001f0 The OpenSSF Package Analysis project identified '@rrvis/ui' @ 99.99.2 npm as malicious. It is considered malicious because: - The package...
MAL-2024-11921 Malicious code in pornhub (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa7d63cf358dbea3acbf0ff8b3a7d859a3d6070c17c3a4acdbf01f3b0d18ccbb The OpenSSF Package Analysis project identified 'pornhub' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicat...
MAL-2024-11824 Malicious code in pobreiaia33 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6bdb837ef15f5a4502cff360eb94b6a0a5c18859512e78cc5c93ea3c39044e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11796 Malicious code in testin-elengo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594a2ba539dc07c62c9e4e9310e88baf659a54029490fd15312eaba8cc279e00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11793 Malicious code in dextester123 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26d87ee78544b18671f34fdbfc2bb566d83d78f917c88958141e6c335ba9242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...