Malicious Package

Overview ph-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

Malicious code in ph-common (npm)

Source: amazon-inspector f82053e651a1ec7ee7cdf8ecd57ca4be012f7ce8d60dec081f99c2b80cb66bf2 The package is a stub whose index.js exports a Proxy returning no-op functions for every property access, so consumers that import it receive a non-functional module. The only functional code is beacon.cjs,...

[SECURITY] Fedora 45 Update: phodav-3.0-15.fc45

ph=E1=BB=9Fdav is a WebDAV server implementation using libsoup3 RFC 4918...

Malicious Package

Overview kartykgithub-ph-f is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

kartykgithub-ph-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-b (1.0.0)

kartykgithub-ph-b NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-b and may be impacted: - kartykgithub-ph-dep 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KARTYKGITHUBPHB-20385967...

Malicious Package

Overview kartykgithub-ph-e is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview kartykgithub-ph-b is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

kartykgithub-ph-f-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-f (1.0.0)

kartykgithub-ph-f NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-f and may be impacted: - kartykgithub-ph-f-dep 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KARTYKGITHUBPHF-20385969...

kartykgithub-ph-e-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-e (1.0.0)

kartykgithub-ph-e NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-e and may be impacted: - kartykgithub-ph-e-dep 1.0.0 Source cves: unknown CVE Source advisory: SNYK:JS-KARTYKGITHUBPHE-20385968...

kartykgithub-ph-f-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-f (1.0.0)

kartykgithub-ph-f NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-f and may be impacted: - kartykgithub-ph-f-dep 1.0.0 Source cves: unknown CVE Source advisory: GHSA-X2M2-W3GV-M5WG...

Malware in kartykgithub-ph-f

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in kartykgithub-ph-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e9463feb27a295ad0b7136837e12908bc8d668e0b7bbd70309c760165f071f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kartykgithub-ph-f-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-f (1.0.0)

kartykgithub-ph-f NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-f and may be impacted: - kartykgithub-ph-f-dep 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17426...

MAL-2026-17426 Malicious code in kartykgithub-ph-f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e9463feb27a295ad0b7136837e12908bc8d668e0b7bbd70309c760165f071f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kartykgithub-ph-e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e406902c3f8a5a3951ce0c776e78b867e679199c683b67d6f2df8059dcdf72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kartykgithub-ph-e-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-e (1.0.0)

kartykgithub-ph-e NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-e and may be impacted: - kartykgithub-ph-e-dep 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2026-17425...

kartykgithub-ph-e-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-e (1.0.0)

kartykgithub-ph-e NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-e and may be impacted: - kartykgithub-ph-e-dep 1.0.0 Source cves: unknown CVE Source advisory: GHSA-7HQ7-X7WW-7CXR...

MAL-2026-17425 Malicious code in kartykgithub-ph-e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83e406902c3f8a5a3951ce0c776e78b867e679199c683b67d6f2df8059dcdf72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in kartykgithub-ph-e

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

kartykgithub-ph-dep (1.0.0) potentially affected by unknown CVE via kartykgithub-ph-b (1.0.0)

kartykgithub-ph-b NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on kartykgithub-ph-b and may be impacted: - kartykgithub-ph-dep 1.0.0 Source cves: unknown CVE Source advisory: GHSA-27M4-JJXC-69WF...