MAL-2025-192962 Malicious code in rippling-cli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bac12bb851f49ac4801addcf6964c854abe90430140d3e75e4eefcd4c7cf1bf0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in @espace-client-axafr/redux-contrib (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6699 Malicious code in blanl-pkg (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-6116 Malicious code in pre-and-postinstall-scripts-example (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4994e0104f427d4e6ac062c0ec26e609127db5c43b703a286194e39d36ae9e9 Any computer that has this package installed or running should be considered...

MAL-2025-5801 Malicious code in @rupahealth/design (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0616aa94e7e7f933fb1f912840b3ec202980dde2d75d689d36e2d3cee1a22cec Any computer that has this package installed or running should be considered...

MAL-2025-5242 Malicious code in braintree-dropin (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 975d9545344189dda20be0c6790c2deebbd8fbf1d3b992641dea6f1044521436 Any computer that has this package installed or running should be considered...

MAL-2025-1013 Malicious code in apple-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...

MAL-2025-664 Malicious code in google.kythe (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfd92576cb52e3439544b9c66be7914a1f7326c8ac3ab1ab692d694ae00d5806 Any computer that has this package installed or running should be considered...