Malicious code in comp-base-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86dd56ba61a953e19112e8fd19d04c755f48e262186426a358a7251dc398406f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in soufianewldnass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 943431cd355a8b989bd535cb608ec701be5ee1d606e4ecb7bcf010d4b9d3ee69 The OpenSSF Package Analysis project identified 'soufianewldnass' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4950 Malicious code in maxdome-compute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a03c0986aac72f989f747d0a8145d5753b02543abc7a3d934919e395c825ac42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uniswap-v4-scratchpad-poc (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01754c5d133c195a4c109504b5db8355893e90a308a2317d421d8f2d034cad23 Any computer that has this package installed or running should be considered...

Malicious code in fin-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef9a10c09cf18a155ebac430e436ab4c59017c72a1948cea3cbc1b70815cd8a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4720 Malicious code in sess-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d881da182c700bdb8c7c87dfc1b74eb7fd669c9905fdbdbafd08ed876b644959 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4711 Malicious code in bank-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f0763ca6a35d86ac26d0d79bf3170ea38a642062f030c19ac17589065a5e1c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in virtru-design-params (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c17dc3a9d15ee9a1acba1ea2eac04dd9544e09908d2014fcb8b9c689ba07c29 Any computer that has this package installed or running should be considered...

MAL-2025-4670 Malicious code in world-id-lens-dapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d27d63976b7108297f8d9a29062b3add9973c83849fd5ab7cd8fbd31b0248701 The OpenSSF Package Analysis project identified 'world-id-lens-dapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in checkout-sparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f5576b93b0dbfc8f72fa10da0b8b43e6ba0e801c71d51807996063ee1f73f84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4664 Malicious code in new-presentation-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 542a173ba956753bc3d1570cb407b09ae92c7d5690bfacf0aa1bc2aa01f94990 Any computer that has this package installed or running should be considered...

MAL-2025-4663 Malicious code in minimal-ts-webpack (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1cf4c25b4f12d9dcd4bc5b39db0936c0be665009239c28b85696d1a55fafa36 Any computer that has this package installed or running should be considered...

MAL-2025-4624 Malicious code in inter-frontend-svgs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cef0c87cb238b6a66e63b6ede215bd1d867b47ff3bcad84258647d55c810c520 The OpenSSF Package Analysis project identified 'inter-frontend-svgs'...

Malicious code in bombombombom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4feeabe972dbf8a97f4ab7dc12a732e46cb7ac49559cccdb432dc3513b3f6c38 The OpenSSF Package Analysis project identified 'bombombombom' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4622 Malicious code in bombombombom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4feeabe972dbf8a97f4ab7dc12a732e46cb7ac49559cccdb432dc3513b3f6c38 The OpenSSF Package Analysis project identified 'bombombombom' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in rosetta-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 223577bf445eef54d28cca3d3d2015b497b5c23838c938f2a48411440b05f614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in moorkh_hai_tu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c9a195959b550bee1eca57f930d21864f781bd0d6be4f65b19ac06c4088570e The OpenSSF Package Analysis project identified 'moorkhhaitu' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4618 Malicious code in @seo-frontend-components/blog-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 38bc78437090a04d89a5116ac7ad94f3821cfd50c08d81f48528c53e26b6da96 The OpenSSF Package Analysis project identified '@seo-frontend-components/blog-schema' @ 1.999.0 npm as malicious. It is considered malicious...

Malicious code in @seo-frontend-components/card-blog-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1cfcc9a2754a9e96e7bfd7f7c78281a5016b48feeaa8c61f782bcab5dbe4ae8e The OpenSSF Package Analysis project identified '@seo-frontend-components/card-blog-carousel' @ 1.999.0 npm as malicious. It is considered...

MAL-2025-4620 Malicious code in @seo-frontend-components/card-blog-carousel-mobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1eaa599a9c0235a5d52b5534f4177883c03e7ae19496ef98593fadfc3a7ccef8 The OpenSSF Package Analysis project identified '@seo-frontend-components/card-blog-carousel-mobile' @ 1.999.2 npm as malicious. It is considere...