Malicious code in @sas-dvr/nova-graph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ee49dd296a0db13b0118e5424d00aac99ea70cc3664bba504af096916e31998 The OpenSSF Package Analysis project identified '@sas-dvr/nova-graph' @ 132.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-2807 Malicious code in @sas-dvr/nova-graph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ee49dd296a0db13b0118e5424d00aac99ea70cc3664bba504af096916e31998 The OpenSSF Package Analysis project identified '@sas-dvr/nova-graph' @ 132.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2025-2799 Malicious code in sony-liv-smarttv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61696a41d9c61203ebde9adcecf521e954619c6273e75d9da24c9f402aaeb603 The OpenSSF Package Analysis project identified 'sony-liv-smarttv' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2795 Malicious code in @nationalgeographicsociety/ngsui-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d937ed5f0de34fc1491db77a6b046ff477eb03286b9c49541ae1250170651eb0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in castorama.pl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 730bed67861cb1d30e187eb40b957257e8395b86e8a9e255005ba3b808369878 The OpenSSF Package Analysis project identified 'castorama.pl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2793 Malicious code in castorama.pl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 730bed67861cb1d30e187eb40b957257e8395b86e8a9e255005ba3b808369878 The OpenSSF Package Analysis project identified 'castorama.pl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-2792 Malicious code in bugbounty208-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5012a09f4c2283a7df00a99f643af1a87adbef671a39e6569188a3bcdced87e8 The OpenSSF Package Analysis project identified 'bugbounty208-test-package' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-2728 Malicious code in bagayaluzqdl159 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7811a14ef94ae6d98abe542d9f5c3d933e30c3a7d85a4f5fe707e102acbb6f2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2623 Malicious code in corehome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 835efaf181707862582cf58938ea26bb25e18a1d228269a42b58f12d1c250ca7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2624 Malicious code in codex-cipher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ce020b1fc0f9d126255429ca44d4407527446d2650c546670d79bc9c84056cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2605 Malicious code in lwc-recipes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 92235263cd97e4d59a59394c77aeabcc20e347bda974b68b18072cf74295f12c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2563 Malicious code in byted-midas-render-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b801b5ca095df1e96b38bfc8f414ed583b82378f669eea2e6028157e2dbecc94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2562 Malicious code in com.unity.performance.profile-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0af641db458fc7a8378ef6660e94aa21d6e8a8662aa90cc72412d909765b39d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2539 Malicious code in @brix-crypto/crypto-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7667e8bc15f436605e7a5f94dbf1a1d0534b380ead2a777826cc73ad68cf586 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2486 Malicious code in militaty-geza-blessed2025hondo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f68cc04dd7a67be9ecd2b61249ad24d3e6b39c02fd0195aa04d3e1652294da0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2485 Malicious code in sendmoneyserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22431b45239f04c82c7ad749764ff1a438263e5fb1fa13236061aecdd49bf1b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2483 Malicious code in idt-validation-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d72d5fae92d76007bde68b9b614eb69f67499c1fdc108ee21598c9df3e8937b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypalmeserv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7db514ac9a1d6bb1d153f707edbe17a9c76113c4c4f0cce32343fc3fffc2a996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2450 Malicious code in com.unity.testtools.codecoverage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed939e317fc9dd609fd574e15a987ca53e56d84311ad769e3cd7ef39b3c76d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @flutterfire/source-ui-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d5007a2c3f744fc79ba88f20dcf5897470581ccbb3a076b83a10d43ad9c6f5e7 The OpenSSF Package Analysis project identified '@flutterfire/source-ui-widgets' @ 1.0.0 npm as malicious. It is considered malicious because: -...