MAL-2025-3786 Malicious code in volkswagen-onehub-components-raj (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6a188821a8fcc9aba3c1c6731edb7d72a5fb18997b43678070ad3234057f807 The OpenSSF Package Analysis project identified...

MAL-2025-3784 Malicious code in webpack-cli-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6923a0b0ac00b6df0f50acbb796a23891fbe7d857f5f130a62b03f3a7cea9da8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3783 Malicious code in webpack-cli-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ddac203965243a9f1a0fac7e0e5e5217dec4667917b4d23c3dc0e7780d3176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3737 Malicious code in com.unity.visualeffectgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612fb4f703fb888029e1ae8bf1069fc5719a9288ee946e4210c5127c665c38d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3732 Malicious code in com.unity.render-pipelines.universal-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e796de3cb6203dc09766f14c46913307a4c760e4cd01047b30993c7ac605648c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3733 Malicious code in com.unity.rendering.light-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc9f46e39b3f3be7d09553ea71c7f7f3611b95a6cca1730f90f7094dda0ad54 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3725 Malicious code in @nitro2/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140caf464a34fc34d7fea71e7561ee5849558b1ee1c7987c9a38c265eb22e4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.formats.fbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 583302188f1d3c02ddb7580ef4df38be05d5acfe23e795966baa799cda4efa8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3727 Malicious code in com.unity.formats.fbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 583302188f1d3c02ddb7580ef4df38be05d5acfe23e795966baa799cda4efa8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3734 Malicious code in com.unity.robotics.warehouse.base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c888bbc76a87698356b86c72559a95c4a77dd4440e06d6ccb1423ae2aab3bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3728 Malicious code in com.unity.furioos-connection-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68c58a66214f806ff93b92a26cc583bbad8e5b14bde97afe154c5c850bc40585 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3730 Malicious code in com.unity.perception (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 882160cfdcc85287d81ae0b812ae0b3e00bd6254e018d4268f6e54655839a10f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.rpc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29020683719ce2888e35bc68573af9acf12bfa039f451c61178d38ae8210386d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3726 Malicious code in com.unity.cluster-display (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b017254017be28523d1d339bd21b2d15cfa38d299a6dfd0df7a157028c544bac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.scripting.python (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be82e73674df50f7f47d6c1c4f94d2c17d47e0b4fe889b1d813aef836bd95c98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3729 Malicious code in com.unity.list-view-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e62e603878259ca3d97124f0e3dd5225e75518c1572831a35e96a26b807e151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3740 Malicious code in badgerdoc-storage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57170ed58e2cf5e3b4b32f443ae555c7c040f2a395b3505837c90e06add93db5 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

MAL-2025-3713 Malicious code in @dm3-org/dm3-lib-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdc7c9221213814713a1de5a0f5527c3975c0942520d64147788ea8869d8efe8 The OpenSSF Package Analysis project identified '@dm3-org/dm3-lib-shared' @ 1.7.2 npm as malicious. It is considered malicious because: - The...

Malicious code in @ltcp/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2baf7cb605079da5c92272d2ccd46c71bace13775a592149553f3b1ba398837e The OpenSSF Package Analysis project identified '@ltcp/ui' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3702 Malicious code in @cewe-phoenix-themes/default-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8fefa5fe5221477fe4ca130e84721255986e7b048f3e5922c99cac89d94df83 The OpenSSF Package Analysis project identified '@cewe-phoenix-themes/default-theme' @ 99.9.1 npm as malicious. It is considered malicious...