MAL-2025-3295 Malicious code in bvr-api (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ed2a0f9c584ecfcffc1c76619a1637559d1d8771f78e1d3655f819f7fff67962 The OpenSSF Package Analysis project identified 'bvr-api' @ 0.3.12 rubygems as malicious. It is considered malicious because: - The package...

MAL-2025-3279 Malicious code in sprocket-webapp-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f5d57baf1c9d4921b97830956bc52be3915cbc7653c64569768d18c5583c845a The OpenSSF Package Analysis project identified 'sprocket-webapp-poc' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2025-3268 Malicious code in arubaiothubdemoapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 876ff25e0242422681fb71c6ba92f36b79e0584103fae49a5bffdd959497485b The OpenSSF Package Analysis project identified 'arubaiothubdemoapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in arubaiothubdemoapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 876ff25e0242422681fb71c6ba92f36b79e0584103fae49a5bffdd959497485b The OpenSSF Package Analysis project identified 'arubaiothubdemoapp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3222 Malicious code in web-sim-control (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d3b8a674300adbbebf266b874c5c0505e514bace39bd005a46f18525cd3eb16 The OpenSSF Package Analysis project identified 'web-sim-control' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-3174 Malicious code in typesense-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 490e72092d3e2b725ff92c6b8bb87fb850509bdd1abbead8e8cb9427a4d92bcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3176 Malicious code in @n37scancp/highlight.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 944af106fc0b2a334ed1ab4fb6784a0b2cc01e5f795b1de3449b8deaf6560b50 The OpenSSF Package Analysis project identified '@n37scancp/highlight.js' @ 11.11.12 npm as malicious. It is considered malicious because: - The...

Malicious code in @hyattcorp/design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58f37a41edefebdd744efb01380e035aad567082e7fa96361effc44e4e9f1b49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angular2-tesla-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 750e5a71820465f7842a06b6cbaa034cd7f4bf78fb9f20b44e5785088ae8b61a The OpenSSF Package Analysis project identified 'angular2-tesla-common' @ 99.99.103 npm as malicious. It is considered malicious because: - The...

MAL-2025-3136 Malicious code in clarunit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aecdc65ad87798f6243b3d284367e755b52beb5eef68fcc0ca08b0b802230643 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amazonui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c91b2f8916dd3773cd2df6a060349b8291d8d10972f04e2d2fd9a00498b8273 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3135 Malicious code in @weave-mui/divider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05453cfad038ef79e51253af5463badc60bb432de7750f211aa5aa087144ddfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3132 Malicious code in internal-utils-bronxi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b060b166dc77a08c11be2e3aae8d81e5f55f83f1838197b6332c9caf1ed3540 The OpenSSF Package Analysis project identified 'internal-utils-bronxi' @ 100.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-3130 Malicious code in @oldzeppelin/contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59936093e10e486bceef6e021a4ca771a2996cf612a809e2bea28243348f8968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scrt-www (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c3dc483e4a4005db4d3a5ec2f2b2e8d63aa5b8258510f483ce9d4c7351b2c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3129 Malicious code in scrt-www (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c3dc483e4a4005db4d3a5ec2f2b2e8d63aa5b8258510f483ce9d4c7351b2c84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3128 Malicious code in @fraudprevention/device-intelligence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4499ba2c16cf02f2e12c45bba95e21bd588726f331f7a7a7f8eecfbb0369cafc The OpenSSF Package Analysis project identified '@fraudprevention/device-intelligence' @ 100.99.100 npm as malicious. It is considered malicious...

MAL-2025-3086 Malicious code in r5-zknet-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 070dfd4d90ed4eb9d2cd623b84d76f1b2cf1fcfd6bb9704350773e5344446c94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3022 Malicious code in pocketnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73c905c72824fcd244dfaaa2732a81deabf6f59b88d5c95e9d513fd1dd8f5a22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2804 Malicious code in @sas-dvr/ltjs-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bed916c128062e6e46a4741aecf296a1d3898ba06f3f0a818b19c8e90cd69f5b The OpenSSF Package Analysis project identified '@sas-dvr/ltjs-bird' @ 132.0.0 npm as malicious. It is considered malicious because: - The packa...