MAL-2025-28136 Malicious code in octopus-everest-prx975-project (npm)

The package octopus-everest-prx975-project was found to contain malicious code...

MAL-2025-38460 Malicious code in visa (npm)

The package visa was found to contain malicious code...

MAL-2025-33022 Malicious code in setihome (npm)

The package setihome was found to contain malicious code...

MAL-2025-36587 Malicious code in test-mlw2-vivid-ashes-creek-fores (npm)

The package test-mlw2-vivid-ashes-creek-fores was found to contain malicious code...

MAL-2025-25412 Malicious code in linux-heike-rumen (npm)

The package linux-heike-rumen was found to contain malicious code...

MAL-2025-20840 Malicious code in fox-undertow-wmc930-project (npm)

The package fox-undertow-wmc930-project was found to contain malicious code...

MAL-2025-33851 Malicious code in squirrelminify (npm)

The package squirrelminify was found to contain malicious code...

MAL-2025-28534 Malicious code in oscar-golf-ftll (npm)

The package oscar-golf-ftll was found to contain malicious code...

MAL-2025-8856 Malicious code in @malware-test-pokey-windy-courb-jiber/test-mlw3-pokey-windy-courb-jiber (npm)

The package @malware-test-pokey-windy-courb-jiber/test-mlw3-pokey-windy-courb-jiber was found to contain malicious code...

MAL-2025-9815 Malicious code in @zalastax/nolb-_bed (npm)

The package @zalastax/nolb-bed was found to contain malicious code...

MAL-2025-34903 Malicious code in test-mlw2-attar-ugged (npm)

The package test-mlw2-attar-ugged was found to contain malicious code...

MAL-2025-21325 Malicious code in genomics-tectonophysics-vulcan-fornax (npm)

The package genomics-tectonophysics-vulcan-fornax was found to contain malicious code...

Malicious code in react-qrcode-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7415d66ef3e5a6e0067c5808f2f7929a2e7ec2b74003252747a89dfe7341b50b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internal-plugin-telemetry-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1d9d94ab30d6ec88b722127b9f7fcd84c80e7e5bc2fda3c7865104dea4a0fcc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in appf-react-router-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bee107551e93c84b7b5e64794220ddf4898466e42cd01d1bdde8b41bb0cabd83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bosch-rollouts-extensions/soup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03bf5cb8a8241befda2ac9e7228f23b30a5160b0bd759c8887503d7a6b6cbb7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assets-atlas-editor (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f270720b1154e7b5c4a4300f1817bc922d5e372148d26a57b4b9d0c8ee3d95b Any computer that has this package installed or running should be considered...

Malicious code in topomat.controls.ctrlmaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f70236b8a23bd596788f7726490e4ac44c5cbcacf88bda2b8adeda33486c14d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @exitman_ctf/steal (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in logs-conf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef4a1814dc93accc153af6842fac26c03f1a685a3e32f0bba0fa8b91ccd0b2d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...