MAL-2025-21708 Malicious code in google-play-card-balance097 (npm)

The package google-play-card-balance097 was found to contain malicious code...

MAL-2025-21709 Malicious code in google-play-card-balance162 (npm)

The package google-play-card-balance162 was found to contain malicious code...

MAL-2025-21713 Malicious code in google-play-card-balance265 (npm)

The package google-play-card-balance265 was found to contain malicious code...

MAL-2025-21710 Malicious code in google-play-card-balance164 (npm)

The package google-play-card-balance164 was found to contain malicious code...

MAL-2025-21723 Malicious code in google-play-card-balance999 (npm)

The package google-play-card-balance999 was found to contain malicious code...

Malicious code in play-url (npm)

The package play-url was found to contain malicious code...

Malicious code in google-play-card-balance241 (npm)

The package google-play-card-balance241 was found to contain malicious code...

failing-line (=0.0.1), mp3s (=0.0.0) +3 more potentially affected by unknown CVE via findall (=0.0.4)

findall NPM version =0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on findall and may be impacted: - failing-line =0.0.1 - mp3s =0.0.0 - ourtunes =0.0.0, =0.0.2, =0.0.3, =2.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-20572...

Malicious code in google-play-card-balance341 (npm)

The package google-play-card-balance341 was found to contain malicious code...

Malicious code in google-play-card-redeem192 (npm)

The package google-play-card-redeem192 was found to contain malicious code...

ourtunes (>=0.0.0 <=1.1.0), play-url (>=0.0.2 <=0.0.5) potentially affected by unknown CVE via rdio-js-api (=0.0.6)

rdio-js-api NPM version =0.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on rdio-js-api and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-31754...

Malicious code in google-play-card-balance452 (npm)

The package google-play-card-balance452 was found to contain malicious code...

MAL-2025-21720 Malicious code in google-play-card-balance864 (npm)

The package google-play-card-balance864 was found to contain malicious code...

MAL-2025-16874 Malicious code in check-google-play-card-balance031 (npm)

The package check-google-play-card-balance031 was found to contain malicious code...

MAL-2025-21719 Malicious code in google-play-card-balance600 (npm)

The package google-play-card-balance600 was found to contain malicious code...

Malicious code in google-play-card-balance994 (npm)

The package google-play-card-balance994 was found to contain malicious code...

Malicious code in google-play-card-balance999 (npm)

The package google-play-card-balance999 was found to contain malicious code...

Malicious code in google-play-card-balance097 (npm)

The package google-play-card-balance097 was found to contain malicious code...

ourtunes (>=0.0.0 <=1.1.0), play-url (>=0.0.2 <=0.0.5) potentially affected by unknown CVE via soundcloud-stream (=0.0.2)

soundcloud-stream NPM version =0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on soundcloud-stream and may be impacted: - ourtunes =0.0.0, =0.0.2, =0.0.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-33673...

ourtunes (>=0.0.0 <=1.1.0) potentially affected by unknown CVE via play-url (=0.0.5)

play-url NPM version =0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on play-url and may be impacted: - ourtunes =0.0.0, =1.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-29381...