Malicious code in corp-ais-client-my-channel-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a5c6a2e2c6632d11abe65b902c4dee848386ec4240aba0fee8f76983ac4ff56 The OpenSSF Package Analysis project identified 'corp-ais-client-my-channel-lib' @ 99.9.10 npm as malicious. It is considered malicious because:...

Malicious code in aps-configurator-inventor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3fc3df70de166c4b79ec8915577d7b560a414f73999a8d88efa7c0bfa59b1733 The OpenSSF Package Analysis project identified 'aps-configurator-inventor' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-48314 Malicious code in my-unique-package-here (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19289cab4482d99ed5e7a74abf6e380b1336b01b89502d23f3a63398b077f128 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48093 Malicious code in optional-native-module-abc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ae21c7e7ad399a3a2a3bf0b58502513f2aa7d40e23bb801a75dd10e871bbf04 Any computer that has this package installed or running should be considered...

Malicious code in v0-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 823ea0633ff002d303ce7a803d2ae0f945f97a935a6757338babb0a483a2f710 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48086 Malicious code in v0-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71d07f2261c23ad9fe0c5b269a07b716f10747239391c989fc1979b322b68b67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vercel-v0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b3f5d72ec9c31838366e2e5e38f08021d40aa495b4424e97ff5b580a24467d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48091 Malicious code in vercel-v0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b3f5d72ec9c31838366e2e5e38f08021d40aa495b4424e97ff5b580a24467d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in v0-next-shadcn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5e9e552239df0cdd60e60db1ee3aa37558a7ae490767639b25d3932079c8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48088 Malicious code in v0-next-shadcn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca5e9e552239df0cdd60e60db1ee3aa37558a7ae490767639b25d3932079c8e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aviatrixdev/flight-suit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dc9bc5d34874a3f8d1af5ce792a55535218bde1497f02e6e1d0e0f7264a25d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47909 Malicious code in nilepkg6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db211445ec3d3ca5848bb58911ca2195d168f2efdc976ce10c50e3b43a4bf4ff The OpenSSF Package Analysis project identified 'nilepkg6' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in dify-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d98e6fba7e9370347c73e0d316cbd3fb83b1cb2e50f5e17a6423d321afa21a59 The OpenSSF Package Analysis project identified 'dify-web' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-47907 Malicious code in dify-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d98e6fba7e9370347c73e0d316cbd3fb83b1cb2e50f5e17a6423d321afa21a59 The OpenSSF Package Analysis project identified 'dify-web' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in lc-http (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a284de978132b8c4d648fba52f9b1c5393d9988773103c1d56302dfe19cacf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @peterwiener/l (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 951ad8532d62f01f70b12691dd0d29e381cbee9f8848da6351d52ea2fc54b3a9 The OpenSSF Package Analysis project identified '@peterwiener/l' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in trendwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdcc4e365d2552163150eaf2fa138c0275533d653441752a4eb49ac5087100fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in phoenix-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47823 Malicious code in phoenix-platform (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 69b500d89836dd1a319cc80d28b1c005dc428afe1520fea95cd3f82b8109bc87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47826 Malicious code in rc-phoenix-tpp-upper-funnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7339748c4b25b1fb792f426edc2468aea1f9a626a53d8b25a29b364b48165d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...