MAL-2025-44066 Malicious code in dove-river-lby389-project (npm)

The package dove-river-lby389-project was found to contain malicious code...

MAL-2025-45974 Malicious code in savanna-peony-bqo298-project (npm)

The package savanna-peony-bqo298-project was found to contain malicious code...

MAL-2025-43935 Malicious code in dandelion-honey-roe710-project (npm)

The package dandelion-honey-roe710-project was found to contain malicious code...

MAL-2025-43998 Malicious code in dewdrop-hill-apc766-project (npm)

The package dewdrop-hill-apc766-project was found to contain malicious code...

MAL-2025-44552 Malicious code in hedgehog-waterfall-vsl162-project (npm)

The package hedgehog-waterfall-vsl162-project was found to contain malicious code...

MAL-2025-46139 Malicious code in star-forest-wro395-project (npm)

The package star-forest-wro395-project was found to contain malicious code...

MAL-2025-45280 Malicious code in nautilus-bamboo-nez184-project (npm)

The package nautilus-bamboo-nez184-project was found to contain malicious code...

MAL-2025-44698 Malicious code in infinity-dove-qev776-project (npm)

The package infinity-dove-qev776-project was found to contain malicious code...

MAL-2025-45584 Malicious code in prairie-spruce-xqs241-project (npm)

The package prairie-spruce-xqs241-project was found to contain malicious code...

MAL-2025-45418 Malicious code in octopus-butterfly-vcy767-project (npm)

The package octopus-butterfly-vcy767-project was found to contain malicious code...

MAL-2025-44280 Malicious code in fjord-vulture-zxg871-project (npm)

The package fjord-vulture-zxg871-project was found to contain malicious code...

MAL-2025-46189 Malicious code in swan-xerox-mhj413-project (npm)

The package swan-xerox-mhj413-project was found to contain malicious code...

MAL-2025-44519 Malicious code in hammock-undertow-lsx730-project (npm)

The package hammock-undertow-lsx730-project was found to contain malicious code...

MAL-2025-44436 Malicious code in glacier-albatross-kyy976-project (npm)

The package glacier-albatross-kyy976-project was found to contain malicious code...

Malicious code in meadow-kelp-vwt735-project (npm)

The package meadow-kelp-vwt735-project was found to contain malicious code...

Malicious code in my-javascript-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52eefb119e001e8686a1bde4aad7885b353649df1b9e39a1e27537c7ca14a980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-42148 Malicious code in my-javascript-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52eefb119e001e8686a1bde4aad7885b353649df1b9e39a1e27537c7ca14a980 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...

Exposure of Sensitive System Information to an Unauthorized Control Sphere

Overview Affected versions of this package are vulnerable to Exposure of Sensitive System Information to an Unauthorized Control Sphere via the project details API endpoint. An attacker can access sensitive repository credentials by using API tokens with project-level or project get permissions,...