Malicious code in pdfmeno1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oakmi15900 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oaithgxwnvon (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8324 Malicious code in oaiprpfnweljs (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0177dba86d66ad5aeca0c6f221d16f5ef8d1dc4a3188dfd435401296c541634a --- Credit: OpenSSF source...

Malicious code in oailm8 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oaibootx8192 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7935 Malicious code in lbmtq5x (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b66b79e9028bcfe179091b9e1698ad7b67fcf9896f9ab7027fd4f084e50e482 --- Credit: OpenSSF source...

Malicious code in lblzhhumah (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lambx5283681 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hrab4 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in grax0 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in enc30654 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7618 Malicious code in dlxprobe1 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 108c1ac322e4792a5595228f8413ed475f22cff6d54fdd97c181a26e759f8b0b --- Credit: OpenSSF source...

Malicious code in civic-test-scrape (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

ROOT-APP-PYPI-CVE-2025-5279 CVE-2025-5279 in rootio-redshift-connector - Patched by Root

Root has patched CVE-2025-5279 in the rootio-redshift-connector package for Root:PyPI. Multiple fixed versions available...

Malicious Package

Overview @cloudplatform-single-spa/enterprise is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

Malicious code in weavedb-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f22636b5e4726978e23b10a4311fb7e65c2b10003da72429348fa617884d1 package.json declares "preinstall": "./vendor/setup", which runs a 976KB packed Linux x86 ELF binary sha256...

Malicious code in class-weaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4e45cdd0a93db2db56ae7fd2c348305a5ce7aeab9c6fb4b2331c2a547b2c5e7 class-weaver advertises itself as a className/theme utility keywords clsx, utils, styling; exports named classNames and twMerge mimicking...

Astra Linux – Vulnerability in Node-EJS

The ejs also known as Embedded JavaScript templates package in Node.js before version 3.1.10 lacked certain measures to prevent pollution...

Malicious code in glass-of-water (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df79336313f71fac8158ff6f3e0160d0e99a8d1d84c452505fd3739af5838a69 glassofwater/init.py embeds 10 Google Gemini API keys AIzaSy... split across 5-part dictionaries and reassembled at runtime by getapikey L6-19. The...