MAL-2025-191666 Malicious code in yelp-pkg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fdea5ca17bb09234a292159e525a2a38ac3fd43760c6f2184aa27f563f320075 During import, the package attempts to exfiltrate potentially sensitive data. --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

Malicious Package

Overview nodemon-pkg is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

EUVD-2025-33627

Malicious code in nodemon-pkg npm...

EUVD-2002-2020

Malware in sbrugna...

EUVD-2008-4963

Malware in sbrugna...

EUVD-1999-0809

Malware in sbrugna...

EUVD-2023-46380

Malicious code in bioql PyPI...

EUVD-2022-26379

Malicious code in bioql PyPI...

org.webjars.npm:image-thumbnail (=1.0.15), org.webjars.npm:pkg-fetch (=3.4.2) +3 more potentially affected by CVE-2025-59343 via org.webjars.npm:tar-fs (=2.1.1)

org.webjars.npm:tar-fs MAVEN version =2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:tar-fs and may be impacted: - org.webjars.npm:image-thumbnail =1.0.15 - org.webjars.npm:pkg-fetch =3.4.2 - org.webjars.npm:prebuild-install =7.1...

CVE-2025-10016

The CVE-2025-10016 issue affects the Sparkle framework’s Autoupdate/Downloader.xpc mechanism. Reports in connected sources describe a local, unprivileged attacker who can exploit a race condition by connecting to the daemon as root to request installation of a crafted PKG, leading to local privil...

Malicious code in random-generator-pkg (npm)

The package random-generator-pkg was found to contain malicious code...

Malicious code in dezelwash-pkg (npm)

The package dezelwash-pkg was found to contain malicious code...

MAL-2025-42061 Malicious code in random-billy-pkg (npm)

The package random-billy-pkg was found to contain malicious code...

MAL-2025-41968 Malicious code in dezelwash-pkg (npm)

The package dezelwash-pkg was found to contain malicious code...

Malicious code in other-pkg-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab79e006d7046832f724293ad8a66618e70b615bb6e223169ac1bda1cae5d4df The OpenSSF Package Analysis project identified 'other-pkg-b' @ 99.0....

MAL-2025-41314 Malicious code in other-pkg-b (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ab79e006d7046832f724293ad8a66618e70b615bb6e223169ac1bda1cae5d4df The OpenSSF Package Analysis project identified 'other-pkg-b' @ 99.0....

Malicious code in dam-pkg-ckeditor (npm)

The package dam-pkg-ckeditor was found to contain malicious code...

MAL-2025-29351 Malicious code in pkg-dependents-cli (npm)

The package pkg-dependents-cli was found to contain malicious code...

Malicious code in pkg-sutex (npm)

The package pkg-sutex was found to contain malicious code...

Malicious code in pkg-dependents-cli (npm)

The package pkg-dependents-cli was found to contain malicious code...