Malicious code in ogi-mangut25-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ad0368e4437886cdab2e2d1ad6ff0516fa6e46a01b702b637b4fa96b822876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious Package

Overview tailwind-chart is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview redirect-ytimeb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview jito-proper-excutor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2002-2183

Malware in sbrugna...

Malicious Package

Overview http-req-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview @self-sell/guards is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-39820 Malicious code in xigua-iyg-project (npm)

The package xigua-iyg-project was found to contain malicious code...

MAL-2025-38520 Malicious code in vizthis (npm)

The package vizthis was found to contain malicious code...

MAL-2025-39108 Malicious code in whale-fir-dh9k (npm)

The package whale-fir-dh9k was found to contain malicious code...

MAL-2025-36581 Malicious code in test-mlw2-vises-canty-prore-femur (npm)

The package test-mlw2-vises-canty-prore-femur was found to contain malicious code...

MAL-2025-40317 Malicious code in yaocao-yumofa (npm)

The package yaocao-yumofa was found to contain malicious code...

MAL-2025-9098 Malicious code in @market-explorer/market-explorer (npm)

The package @market-explorer/market-explorer was found to contain malicious code...

MAL-2025-38732 Malicious code in waaass (npm)

The package waaass was found to contain malicious code...

MAL-2025-9106 Malicious code in @moonpig/web-core-analytics (npm)

The package @moonpig/web-core-analytics was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-37712 Malicious code in unaghvkswmcrefzq (npm)

The package unaghvkswmcrefzq was found to contain malicious code...

Malicious Package

Overview bfiweb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CVE-2025-52991

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data...

CVE-2025-52992

The Nix, Lix, and Guix package managers fail to properly set permissions when a derivation build fails. This may allow arbitrary processes to modify the content of a store outside of the build sandbox. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and...

CVE-2025-52991

The Nix, Lix, and Guix package managers default to using temporary build directories in a world-readable and world-writable location. This allows standard users to deceive the package manager into using directories with pre-existing content, potentially leading to unauthorized actions or data...