MAL-2025-6873 Malicious code in adobe-helix-rum-enhancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47e5b1e8c964526ea266344bff394d02083744b3bcce422729b60b047c005157 The OpenSSF Package Analysis project identified 'adobe-helix-rum-enhancer' @ 99.99.100 npm as malicious. It is considered malicious because: - T...

MAL-2025-6870 Malicious code in @angular_devkit/build-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 053dbd5b72c824b5644482986fcc9a5caca48fcbe447f90f957e420418f2bcb4 The OpenSSF Package Analysis project identified '@angulardevkit/build-webpack' @ 99.1.1 npm as malicious. It is considered malicious because: -...

Malicious code in @angular_devkit/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e71b8ecbb1a24ad2e952dddfe831edc984a60be61de846d61903baae55b376bc The OpenSSF Package Analysis project identified '@angulardevkit/core' @ 99.1.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-6868 Malicious code in web-tv-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5014feae2671e422a28a92b6bd6f8a040a605699f1ebea3e44fb3f910e9e893 The OpenSSF Package Analysis project identified 'web-tv-app' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in f0-service-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c1c79e59e1f33e79ec5042730e0bfb49f02f35acd0399884dbdac006aebcbbd The OpenSSF Package Analysis project identified 'f0-service-manager' @ 4.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6866 Malicious code in f0-service-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c1c79e59e1f33e79ec5042730e0bfb49f02f35acd0399884dbdac006aebcbbd The OpenSSF Package Analysis project identified 'f0-service-manager' @ 4.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6920 Malicious code in dagger-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8....

MAL-2025-6971 Malicious code in solana-pump-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 45d581c17210e8be2e111136cc9853e7c698eaabd46c44482037ba1436c5b9a0 The OpenSSF Package Analysis project identified 'solana-pump-sdk' @ 1.4.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in signup-ui-lego-core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 63d83acde52ca36693d2c4274687d70b0758d12141ee41ae8a97bb6e9267b983 The OpenSSF Package Analysis project identified 'signup-ui-lego-core'...

Malicious code in @eooce/sbx (npm)

The package @eooce/sbx was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c3f68a08af76f3c5412daa2b25a618ab31f5541ee496dec1392afedcf86ec33 The OpenSSF Package Analysis project identified '@eooce/sbx' @ 2.0.7 npm as maliciou...

MAL-2025-6828 Malicious code in @seznam-diskuze/embed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 03c95e188163b615484b4882358ea8d4a9411661fa3bb701052fd608c8f6c4b7 The OpenSSF Package Analysis project identified '@seznam-diskuze/embed' @ 100.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-6827 Malicious code in mda-localise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 613478d63b9c28c110cb883d28d216af5ac0cc3af224415eafe463a905b391c3 The OpenSSF Package Analysis project identified 'mda-localise' @ 0.0.2-placeholder npm as malicious. It is considered malicious because: - The...

Malicious code in yandex-money-bank-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e328869c4f8ab6a67a9978769746d5f2112baf3c92882879c8da485d824adc1 The OpenSSF Package Analysis project identified 'yandex-money-bank-utils' @ 8.8.9 npm as malicious. It is considered malicious because: - The...

MAL-2025-6822 Malicious code in @sber-business-id/srp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74ef435b568b37df784ed252399339d031e51238e46c8a9374c85bec79773faa The OpenSSF Package Analysis project identified '@sber-business-id/srp-client' @ 2.0.0 npm as malicious. It is considered malicious because: - T...

MAL-2025-6821 Malicious code in @tradair-repo/sources-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c2e8efcfd67964d523b508359644439a1c57011cf171ba350241c6949654fe4 The OpenSSF Package Analysis project identified '@tradair-repo/sources-react' @ 1.0.0-malicious npm as malicious. It is considered malicious...

MAL-2025-6820 Malicious code in securitycontext-model-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d0f5dc5cd2ec64246a68ae3d6a8a63b03e25442841125c4fcaf8601002d97bb2 The OpenSSF Package Analysis project identified 'securitycontext-model-paypal' @ 2.2.22 npm as malicious. It is considered malicious because: -...

MAL-2025-6819 Malicious code in angular-sources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff334dd83f794d2141307860dd5229672ff176ff05a1a2ac22674fe9146f8938 The OpenSSF Package Analysis project identified 'angular-sources' @ 999.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6816 Malicious code in teste-depenconfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56a7fcb8d17544bc05d4a5222d7741781d9b33d6ad5d334d6c74b8851d20a257 The OpenSSF Package Analysis project identified 'teste-depenconfu' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in eslint-plugin-react_editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 091ef657bc115b400dc3d8cd65691df53caef85fa307f52d627aac4d50120a77 The OpenSSF Package Analysis project identified 'eslint-plugin-reacteditor' @ 71.71.72 npm as malicious. It is considered malicious because: - T...

MAL-2025-6812 Malicious code in eslint-plugin-react_editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 091ef657bc115b400dc3d8cd65691df53caef85fa307f52d627aac4d50120a77 The OpenSSF Package Analysis project identified 'eslint-plugin-reacteditor' @ 71.71.72 npm as malicious. It is considered malicious because: - T...