Malicious code in amazon-titan-inpainting-pipeline (npm)

The package amazon-titan-inpainting-pipeline was found to contain malicious code...

MAL-2025-39274 Malicious code in willitrun (npm)

The package willitrun was found to contain malicious code...

MAL-2025-38903 Malicious code in wave-jungle-dra062-project (npm)

The package wave-jungle-dra062-project was found to contain malicious code...

MAL-2025-23688 Malicious code in javascript-xenos-rigel-izar (npm)

The package javascript-xenos-rigel-izar was found to contain malicious code...

MAL-2025-8896 Malicious code in @malware-test-salle-swarf-samps-barge/test-mlw3-salle-swarf-samps-barge (npm)

The package @malware-test-salle-swarf-samps-barge/test-mlw3-salle-swarf-samps-barge was found to contain malicious code...

Malicious code in vercel-internal (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in jira-dashboard-items (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79ab5b6ba91047c189dc1c045205cf83046fa39fd12a9292f3ed8b4ea48582b6 Any computer that has this package installed or running should be considered...

Malicious code in vscode-websearchforcopilot (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 247d22ce4a478ffa11b9b10a31460cd13afeba961c80bf8f08a8557aef325569 Any computer that has this package installed or running should be considered...

MAL-2025-4970 Malicious code in com.google.play.appupdate (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3947330cc41713516ed88cb21b4ee7eb95b9b59d534811223a3bb3d9b696b24 Any computer that has this package installed or running should be considered...

MAL-2025-4750 Malicious code in ml-payment (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b15f383166aad3ae73303a775a513a1ea7c14f763d168d6dc1eb971abf0cd0e Any computer that has this package installed or running should be considered...

MAL-2025-1677 Malicious code in pages14.0.0_i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaed3f8870b4796bd4fc8667ec8911ddba466acaed945970ce6cf2f67e2630a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1464 Malicious code in archon7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f53d83b877f02c6e6b51cad5ccf4940a0e19e8e9aeda69d9a9d013ca471bd64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openbet-access-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd796ac609bd9ccd763f039c5ecfd7fd63b7c76170f3feaba70a4d2148fa881 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in theice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a5284ff23f0c6a6b960f00ae8adcf8fd068d714b2689229fa6355a69fc5d778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-391 Malicious code in apple-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b18eeeb5282535e8959e8e401a02971ab116425fce03d35ba50be1c2db0d6f1 The OpenSSF Package Analysis project identified 'apple-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-12127 Malicious code in v2raya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae466e2cd9854b6691f27073b78d1015bd7be97736d10c1615bd3dc72ed61fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jigasi-haproxy-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a84edbe7b5074454dc19154e38a0b4aaebad52cb446488862a52aa8e62db2b53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acl-icon-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4489b16998820b6266bd347e1334303e6127e834aae4103899a3aeb7cbbc9887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dfx-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e8dd3f6ae19fd4f9a3caf77e04cd527a549b3f14d5c09a0cbc73b459a74c0079 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/assumenda-possimus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb89944fe6adc9d9300d797498b9c64e606af533104df990bf588baa47513220 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...