PT-2025-37744

Name of the Vulnerable Software and Affected Versions: color-string version 2.1.1 Description: The npm publishing account for color-string was compromised following a phishing attack. Version 2.1.1 was published with a malicious payload designed to redirect cryptocurrency transactions within...

Malicious code in mofa-xuetu-vol9 (npm)

The package mofa-xuetu-vol9 was found to contain malicious code...

Malicious code in namedpkg (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @zalastax/nolb-_expop (npm)

The package @zalastax/nolb-expop was found to contain malicious code...

MAL-2025-15252 Malicious code in az-bundler (npm)

The package az-bundler was found to contain malicious code...

MAL-2025-21364 Malicious code in get-asphalt-9-legends-credits-generator (npm)

The package get-asphalt-9-legends-credits-generator was found to contain malicious code...

MAL-2025-37720 Malicious code in underscroe (npm)

The package underscroe was found to contain malicious code...

MAL-2025-36310 Malicious code in test-mlw2-spite-yrapt (npm)

The package test-mlw2-spite-yrapt was found to contain malicious code...

MAL-2025-40614 Malicious code in yotacast (npm)

The package yotacast was found to contain malicious code...

MAL-2025-17252 Malicious code in codegennativecomponent (npm)

The package codegennativecomponent was found to contain malicious code...

MAL-2025-38001 Malicious code in utopia-orangutan-nxd776-project (npm)

The package utopia-orangutan-nxd776-project was found to contain malicious code...

MAL-2025-7452 Malicious code in @crabas0npm/perferendis-et-laudantium (npm)

The package @crabas0npm/perferendis-et-laudantium was found to contain malicious code...

MAL-2025-25438 Malicious code in listables (npm)

The package listables was found to contain malicious code...

Malicious code in fastybird-devices-module (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6234 Malicious code in nodejs-backpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb99e7712a778eec132a6648afa1e407630ce06d816611aade3e1e1986562f0a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6217 Malicious code in bingo-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db9cd7f456a7e51d21294046604654fa4f3ec5b9ee11c7acd713ab08ad6838da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in navigation-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39b1dcf034a843e18501251d3a3e0d37d413b30645566c5a4c80fc17aee8cf15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scenes-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39e4ea55e37dda98df207b010b0fd6e64dc467ed051fa91d18337a7ea9e46152 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6159 Malicious code in fathom-fox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac1e7b59b9f2a49b04dac133e2367b50305f8105cbc53e45be4db10e1107daf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6179 Malicious code in mozilla-l10n-docs-linter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d878786926dde4c1aa2b65c2241ee43a14fbd2a46d890e608e4374ef405ff359 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...