Malicious code in commondatalayer-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ade9f77c27855eda32e445a304d4f4bd3f00bc8cde8b1cfd8b6785f958a702f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47820 Malicious code in propeller-solver-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a79fc2ce4f8dbef3a36ad1dcf36011f9d86435f347aa81ed601295d75e818b04 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in rack-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486f75e4ca656b6182f940e14f4a16bb48bef108e68163afe3f0ecb9d65465ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47863 Malicious code in test-prob-to2324 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4628b79fab4d286704a53af4e8df8cc72149ff0b04b72d4a8ec23983ed62f92d The OpenSSF Package Analysis project identified 'test-prob-to2324' @...

Malicious code in filecoin-checker-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6196805b97dfa338fede5b1f871b87e26bfe4909ed5ac6a26c580e29f40cd85d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47513 Malicious code in @bgrc/kyc-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 491ac58a40b45ff06a00ad44a33a15bd95394c8fde64034d150fb31433a18380 The OpenSSF Package Analysis project identified '@bgrc/kyc-theme' @ 9000.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in across-indexer-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fef241ea15f212acce31cd8bcc9d561a7f8a55c8367d778cca91c189d8a3a7 The OpenSSF Package Analysis project identified 'across-indexer-monorepo' @ 7.1.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-47509 Malicious code in syf-api-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a990f780ff2003775ab94c7c9d7b8cf3cf81b631fb625b0a827abd24076e9e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47460 Malicious code in circuit-retained (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71eb6f38e5fe1dce06d13f2ba4d58e8a3addd8b17b529b327d02f34b54472cb5 The OpenSSF Package Analysis project identified 'circuit-retained' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in libvirt-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2071f9220268a6478afd2c0c3f551190b1ac0eec255abc1d5e1dbc35744e5e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47426 Malicious code in playground_root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5ac61f295a55d3954f84caefcd0b84187f168266243137208bba3f2e77f4fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47425 Malicious code in storj-satellite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a2cdc91ce66bac3ff8836be68fb784bbdf468eed157c29548ca788ae8669b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47427 Malicious code in tml-footer (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00452b25be1612714f1d3a1de19a9429e6d4f1d0c2450103ce3791c2d27ff72a The OpenSSF Package Analysis project identified 'tml-footer' @ 99.9.9...

Malicious code in updox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dd4f7a8300a1eb6ed1be834e8cbec76f95c8eb7325192124ad7379896c9a0b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kreme-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b37346bf5501afd9654bd64f028afa11d20457e237fb2b45a4bff318617c64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47129 Malicious code in kreme-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74b37346bf5501afd9654bd64f028afa11d20457e237fb2b45a4bff318617c64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cnx-ui/cnx-ui-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87e84454809b6a23abcd234d62b4b3630bd69cf9c89b02f5e5f8c16204712981 Any computer that has this package installed or running should be considered...

Malicious code in eth-exec-txs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 288cdf368821283de11f98ec0f9c5d0daf500ed6be174fd0c3c7811d4346cf1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47092 Malicious code in @cryptochords/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0557b94cb12763b7d0b2bc1fbfea247c656476c068c2bf2161f8fa35ce3254cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47099 Malicious code in moduletestsimple5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 863c45993e52cf53af1214fe7d49bdf3b9d7f88da6e2df1aff079e0000dfc9f4 The OpenSSF Package Analysis project identified 'moduletestsimple5' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...