MAL-2025-6973 Malicious code in flatfox-api-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a81db9eb6d8c8eb51eecf49610e1282097b77630ccb58b6eef3e2f002e5fe0e2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in swiv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 945d4a5f54e77ae66588b5b64aa30eb2627903bffcb72a3031b9c4b6b2122b43 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6895 Malicious code in commonweb-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c019e3086bf1cec9b859c8fe048187fc7cf6dc866de93fbd0ff2182b3e4fc0a The OpenSSF Package Analysis project identified 'commonweb-setup' @ 10.11.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6947 Malicious code in personalizationtrkserv (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e171fa4d76ea31b32b21ec8efae81c75a65d7adcc42a621c06cfd5406110131 The OpenSSF Package Analysis project identified...

MAL-2025-6893 Malicious code in gen-studio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75651f44d228425603e123afc19ebe54f8701a76f7c4325cdb00545156df506a The OpenSSF Package Analysis project identified 'gen-studio' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6886 Malicious code in solana-spl-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abc65f4de1b50248d903c79cb67ac016c8da464314e5830c70dbe0a1140503a9 The OpenSSF Package Analysis project identified 'solana-spl-sdk' @ 0.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @capacitor-bmo/biometric (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31e5db1d24cb68dbd291a2dc917c13515b048d4ae58196d9a921d4fea7382316 The OpenSSF Package Analysis project identified '@capacitor-bmo/biometric' @ 9999.0.1 npm as malicious. It is considered malicious because: - Th...

MAL-2025-6884 Malicious code in @capacitor-bmo/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73144f96ecbe009cff465503e7a7c8d70408d0a85196d3b8faefbd6809a731e8 The OpenSSF Package Analysis project identified '@capacitor-bmo/common' @ 99.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in web-bluetooth-spp-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bdbd2a9a0d851f1dae6e50f3c00e0b0839441f59b05d4e49f753afe278cd0ca9 The OpenSSF Package Analysis project identified 'web-bluetooth-spp-application' @ 2.0.1 npm as malicious. It is considered malicious because: -...

MAL-2025-6879 Malicious code in @yaqiguo/dnstest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d10a6c69fefe74572e208680a6e74fa93be7f549ac4f033a0dbbfc6ddb656b43 The OpenSSF Package Analysis project identified '@yaqiguo/dnstest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6902 Malicious code in @goes-funky/y42-vscode (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f2e0a98abbd9d80612a2ceffc06aac69b23dd12331094d9588992d8789631cf4 The OpenSSF Package Analysis project identified...

Malicious code in @erboladaiteas/quam-quo-asperiores (npm)

The package @erboladaiteas/quam-quo-asperiores was found to contain malicious code...

Malicious code in oscar-db9-project (npm)

The package oscar-db9-project was found to contain malicious code...

Malicious code in echo-hotel-quue (npm)

The package echo-hotel-quue was found to contain malicious code...

Malicious code in waterfall-yucca-fww745-project (npm)

The package waterfall-yucca-fww745-project was found to contain malicious code...

Malicious code in promise-cron-key-sudo-analyze (npm)

The package promise-cron-key-sudo-analyze was found to contain malicious code...

MAL-2025-29888 Malicious code in project-6aeoa-honeydew (npm)

The package project-6aeoa-honeydew was found to contain malicious code...

MAL-2025-16089 Malicious code in bravo-9gz-project (npm)

The package bravo-9gz-project was found to contain malicious code...

MAL-2025-6876 Malicious code in responsive-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afdda2858edbdcc921f3ba82cbd2e348994eb5d31b6a87f4487dd774ee554f7 The OpenSSF Package Analysis project identified 'responsive-dashboard' @ 2.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in adobe-helix-rum-enhancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47e5b1e8c964526ea266344bff394d02083744b3bcce422729b60b047c005157 The OpenSSF Package Analysis project identified 'adobe-helix-rum-enhancer' @ 99.99.100 npm as malicious. It is considered malicious because: - T...