Malicious code in lfs-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c701260c51375b73d9b993340fc1b603958a46bf115033de75a5a57e7b1acc35 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zeus-mex-user-profile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fc81d9c5665e17c547b5f656a72158c37bbde79ea7dab611838f87e54a37833 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zeus-me-ops-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdb883ba3968557743369275e52574c356a37a380d7314c4fd45cc3ee6088a9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49066 Malicious code in wm-tests-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 121558d6ec677ddacd0f0a5568a855ebf1afa527ad4e25ad97ab770b89ba16fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ucbuzz-web-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-49007 Malicious code in ft-flow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c048d30efedaea5fdd0efeaa12f5ac0fc2498a9a3ff8698af6c96566e5542825 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in annotate-pure-calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a9cdca3a9ab53743de2a24b78ebb758510f58ed74ba54d5f727dcfdb17e317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48984 Malicious code in annotate-pure-calls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a9cdca3a9ab53743de2a24b78ebb758510f58ed74ba54d5f727dcfdb17e317 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in minify-dead-code-elimination (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae32f7c04b27629bde0236a0f5931b70208313af390161f1d6564c0022d9f39c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview xdater is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious Package

Overview cypress-typescript is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48927 Malicious code in func-analysist (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80289c38bf711f5ac60787399d199be29ca23f0695b947ee46825c9a3ce226bf The package func-analysist was found to contain malicious code. Source: ghsa-malware bb257e8ae472109cbe751b79ea838ddb8a0272301fac276ca6ade81aaa72b7d9...

MAL-2025-48933 Malicious code in react-ipack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04968f8d37cfe2848c6e84c9c09a994da049651043da1015e31963470062395a The package react-ipack was found to contain malicious code. Source: ghsa-malware 3411c0f05536a691b48437d34b83198f786eb7a2d19d27a5c4555ac397d5a927 An...

Malicious code in fzreo-trading-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f88d8fd4cc0828b828f3a6fe64daf9b8dc84c84729972d2c17de5559ab96c653 The package fzreo-trading-sdk was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48923 Malicious code in arno-baidu2-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131a10e926c682b41b450810caef439af7c7137fa95422b58970a57ff2a2316d The package arno-baidu2-test was found to contain malicious code. Source: ghsa-malware 380635db26fa9fbaa70b78c6dba294a362a9342cb346a4f0542792c92b7cb7...

MAL-2025-48916 Malicious code in @jameson777/mytest2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94946f30715b082da6af0746769cd6b9ffb54774bf6c9fd71d59273de29fb357 The package @jameson777/mytest2 was found to contain malicious code. Source: ghsa-malware...

Malicious code in internallib_v691 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5ee2345e934aa8329160e96eb7ef42bcb49e3a4ab1b782922617ff5139ffe5 The package internallibv691 was found to contain malicious code. Source: ghsa-malware 9528ffabfb8298ea419a8ed4f61cf56c726da851547cf6c27cfc9eca501181b...

Malicious Package

Overview taxify-work-profile is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in shopify-logistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c496eebb9741a5d54e47561695a16482339e4d8b2094e4269c722c2cd17b04b The package shopify-logistics was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48934 Malicious code in shopify-logistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c496eebb9741a5d54e47561695a16482339e4d8b2094e4269c722c2cd17b04b The package shopify-logistics was found to contain malicious code. Source: ghsa-malware...