Malicious code in oci-console-plugin-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19ce011b024c9c3dcf78578cbf559de94a96364525ace53ce28457dba2053bf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-46589 Malicious code in wawan-mieayam14-breki (npm)

The package wawan-mieayam14-breki was found to contain malicious code...

MAL-2025-44097 Malicious code in eka-ikan80-kyuki (npm)

The package eka-ikan80-kyuki was found to contain malicious code...

MAL-2025-10319 Malicious code in @zalastax/nolb-_phoenix-plugin-registry_w (npm)

The package @zalastax/nolb-phoenix-plugin-registryw was found to contain malicious code...

MAL-2025-12582 Malicious code in @zalastax/nolb-ngz (npm)

The package @zalastax/nolb-ngz was found to contain malicious code...

MAL-2025-28053 Malicious code in observatory-alpha-u7qb (npm)

The package observatory-alpha-u7qb was found to contain malicious code...

Malicious code in @zalastax/nolb-discords (npm)

The package @zalastax/nolb-discords was found to contain malicious code...

CVE-2025-4949 vulnerabilities

Vulnerabilities for packages: sonarqube-10, thingsboard, nextflow, apicurio-registry, wildfly, apache-nifi-registry, gradle...

Malicious code in atlaskit-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a82f51289bb90a9a96816fcf188b81cd24166b48cac9cc66d28af7e68e1acc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-1634 vulnerabilities

Vulnerabilities for packages: apicurio-registry...

Malicious code in @fake-registry/a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97c876bbfb1684701b8dc4481892093cd4c86a3dc718debe40811786e4175f57 The OpenSSF Package Analysis project identified '@fake-registry/a' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...