EUVD-2025-39735

Malicious code in erwin-brengkes34-riris npm...

EUVD-2025-39786

Malicious code in eko-sambel78-riris npm...

EUVD-2025-41675

Malicious code in andi-telurtahu33-breki npm...

MAL-2025-49721 Malicious code in yuni-serimuka97-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab041ffd2b205ef66202409850bdbb64a2db43112053a413ae66d20516c716ba The package yuni-serimuka97-sukiwir was found to contain malicious code...

Malicious code in test882 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31514c1ba67261aad22d186ce1d76ed34c4cda2b146dcf6801fdcb156505dda The package test882 was found to contain malicious code. Source: ghsa-malware a7c1efeed4d026cd9899c479b5b207d5e82ab7fb917f84c402aab7798857bb0d Any...

EUVD-2025-37062

Malicious code in mms-thin-client npm...

Malicious Package

Overview @aio-commerce-sdk/config-tsdown is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

Malicious code in circuit-runtime-test (npm)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2025-33941

Malicious code in scr-cloud-project npm...

MAL-2025-48392 Malicious code in ninjaleetpkg1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1400ff910dce42446a511f3893a11b1567060fb60c8f49b1a9b7ee7e10c91d0 Any computer that has this package installed or running should be considered...

EUVD-2019-3153

Malware in sbrugna...

MAL-2025-48374 Malicious code in nileninjapkg5 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

EUVD-2022-33583

Malicious code in bioql PyPI...

EUVD-2025-20777

Malicious code in bioql PyPI...

MAL-2025-47840 Malicious code in @pvz-admin/shared (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4020200a4088b595e243ce109fbec2e1823739ccd908dcf7a5600488e85b8a0 Any computer that has this package installed or running should be considered...

Malicious code in stylelint-config-opbox (npm)

The package stylelint-config-opbox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 7e02ca16874e3af9774a4294f961e0306827965e363fbb56bcc1b4eb028857a3 This package installs a dependency hosted on a custom domain that...

MAL-2025-47549 Malicious code in checkout-sheet-kit-react-native (npm)

The package checkout-sheet-kit-react-native was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54397e8e5f2da7ea785328f6913d946c6a1a7daaab2b703580781f80f4e19726 Any computer that has this package installed or running should be...

Malicious code in @openzeppelin-compact/compact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8318ee6c50491086374edce68740eb2b1f5827840f0dfd1d428881cfb50b4173 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47200 Malicious code in ngx-trend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4ce4552eafe30b0ec3dfa40fc39012f7f3b56ffa76ec7c9304ef75681921318 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...