MAL-2025-48953 Malicious code in ect-987654-ctf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f07a32f7f265a234c3b4e84eda91976ba6cdb73f979ef22104a70af28bf4a0 The package ect-987654-ctf was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-48949 Malicious code in test771 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39742384f3c2564e0528b3d94dc6b6cd66170e96d6a2818289c862bef030f39b The package test771 was found to contain malicious code. Source: ossf-package-analysis fbdb37fb2238599fb921d6fd14a8d65fdc19f6196377b91e304da671021e41...

Malicious code in jquery-ui-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6feb40c9d7a44c987c085d658198139fcdd2fdf8b0000dab67f486d3271a036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48608 Malicious code in jquery-ui-source (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6feb40c9d7a44c987c085d658198139fcdd2fdf8b0000dab67f486d3271a036 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in near-abi-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb7fc149f977ddf35cb2a6c1bb4f3953ea99551b12cf615f9becf1778c8526f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48605 Malicious code in near-abi-client-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb7fc149f977ddf35cb2a6c1bb4f3953ea99551b12cf615f9becf1778c8526f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48604 Malicious code in faustjs-org-sitemm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd5170a7cd8c6057c679a57454447d33c3c699d911bb06b70386d4d67244ef1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orderbook-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 520e53ed5a79dd5b7c8eb56d8a963c7688a2425f5ef1bd45fe64668c8954eaf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48558 Malicious code in demo-mercadopago-mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a777ccccffbf142e34b0081be4681c4ffcb72aa584b99d15bfd58878e6085881 The OpenSSF Package Analysis project identified 'demo-mercadopago-mcp-server' @ 99.0.3 npm as malicious. It is considered malicious because: - T...

Malicious code in demo-bike-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c9ef89d7c326b74bbab220d2d159df0e002f04d0379ce022ddad517f9b023d3a The OpenSSF Package Analysis project identified 'demo-bike-store' @ 2.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in demo-pet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 34bb3b7bb7de794000f698b853d7a96df3975ee9aab48496ad1835aeb753c46f The OpenSSF Package Analysis project identified 'demo-pet-store' @ 2.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in doppler-secrets-fetch-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ae1d785262a986eb630a24e7abcd16bd4c799262e11059e5911a40f184ee5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-all1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9b13c552c50461f4b3a7a423bf9fc79e3a5ea1c36d107ecd7536223789616aa The OpenSSF Package Analysis project identified 'test-all1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in stopme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c64e2664020a21b1ba2591990d854c1b1f8e37b00d8e6bc91f1e8703d5f9416 The OpenSSF Package Analysis project identified 'stopme' @ 17.0.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in taxify-work-profile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46f9db2231e68ebc03c3b566274d3bd3c0d6510f29c5eec6c83c1fa41806009a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48457 Malicious code in src_dev-tool_index_ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6c5f130294b305df1adf1e497c66d81ec09ddeffb8bb6d0c486644336706558 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48458 Malicious code in src_plugin_index_ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 396cc58d08775057aef35e59ad51a28c7379449f6f00332d193138ff8b9de09a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48452 Malicious code in src_components_qcreport_index_tsx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f986d5a9a1aa2f94ee01161e75bbf71a7367b9fa7f1a00f86ca9c55cc73b655 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deere-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 355a3e4ff7770ab39aebef0eb84829ba45685d6fe842518c585de20021b505f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in isg-iwp-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd99ea1f73a0a8a60395dd908d6a970f8ab7861bec1eb627b70023c9716185ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...