1773 matches found
MAL-2025-48022 Malicious code in astra-db-recommendations-starter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f406ad9e38dd12903b516bd5bc543aee1c02d1e5641d513bf0a6d1ddb9ce7f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47960 Malicious code in qweqweqwexxx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eb4579b71df57bf70c32bdf8375874927db8256e0dbeb573b748d12439bbe26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2012-1880
Malware in sbrugna...
EUVD-2025-10729
Malicious code in bioql PyPI...
EUVD-2024-44715
Malicious code in bioql PyPI...
Malicious code in @sev-ui-verse/api (npm)
The package @sev-ui-verse/api was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414d159764ceef8011dcd7e75ef5fbfb99ec42da34486271031460875812f54b Any computer that has this package installed or running should be considered fully...
MAL-2025-47355 Malicious code in ts-imports (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eccb885c4d87f75ef3479173055a689c6b90773619272c8ccf891bd342a7128b Any computer that has this package installed or running should be considered fully compromised. All...
MAL-2025-47226 Malicious code in eslint-config-crowdstrike (npm)
Suspicious postinstall script executing bundle.js combined with unsignedbitwisemathexcess YARA rule match indicates potential malware. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5700b3786b16cd76be2c86bc19af1fd76ac0dbfa6bb16f29e3837fc94598b75 Any computer that...
CVE-2025-59331 [email protected] contains malware after npm account takeover
is-arrayish checks if an object can be used like an Array. On 8 September 2025, an npm publishing account for is-arrayish was taken over after a phishing attack. Version 0.3.3 was published, functionally identical to the previous patch version, but with a malware payload added attempting to...
CVE-2025-59144
CVE-2025-59144 concerns the npm package debug . On 8 Sep 2025, the npm publishing account was taken over via phishing and version 4.4.2 was published with a malware payload that attempts to redirect cryptocurrency transactions in browser environments (e.g., via direct script inclusion or bundlers...
CVE-2025-59140 [email protected] contains malware after npm account takeover
backlash parses collected strings with escapes. On 8 September 2025, the npm publishing account for backslash was taken over after a phishing attack. Version 0.2.1 was published, functionally identical to the previous patch version, but with a malware payload added attempting to redirect...
Malicious code in @liquid-web/common (npm)
The package @liquid-web/common was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2152309995aeb57c2d293acf6ebb54fdc8e47239ba56a4b742bd00743a7468a5 Any computer that has this package installed or running should be considered fully...
Malicious code in arjvg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1cd64f189589f89a129472b58fe6cdad30ec47b3cbbefc805f31d335ed8cac98 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in test-mlw1-zeist-guana-clefs-kaama (npm)
The package test-mlw1-zeist-guana-clefs-kaama was found to contain malicious code...
Malicious code in nikeyi-zaitaluo-yidian (npm)
The package nikeyi-zaitaluo-yidian was found to contain malicious code...
Malicious code in jasmine_oib8l_hda5e_firefly (npm)
The package jasmineoib8lhda5efirefly was found to contain malicious code...
Malicious code in sinta-gandul98-kyuki (npm)
The package sinta-gandul98-kyuki was found to contain malicious code...
Malicious code in @teamteanpm2024/beatae-laudantium-natus (npm)
The package @teamteanpm2024/beatae-laudantium-natus was found to contain malicious code...