Malicious code in priceeqn (npm)

The package priceeqn was found to contain malicious code...

Malicious code in lemon-zulu-banana-vwybn (npm)

The package lemon-zulu-banana-vwybn was found to contain malicious code...

Malicious code in snorocket (npm)

The package snorocket was found to contain malicious code...

Malicious code in @malware-test-basho-spewy-going-sumps/test-mlw3-basho-spewy-going-sumps (npm)

The package @malware-test-basho-spewy-going-sumps/test-mlw3-basho-spewy-going-sumps was found to contain malicious code...

Malicious code in robotkittens-gsap (npm)

The package robotkittens-gsap was found to contain malicious code...

Malicious code in steganography-superflare-charon-antares (npm)

The package steganography-superflare-charon-antares was found to contain malicious code...

Malicious code in griffin-content-react (npm)

The package griffin-content-react was found to contain malicious code...

Malicious code in geoarchaeology-run-script-parcel-local (npm)

The package geoarchaeology-run-script-parcel-local was found to contain malicious code...

MAL-2025-38149 Malicious code in vasuku (npm)

The package vasuku was found to contain malicious code...

MAL-2025-8995 Malicious code in @malware-test-tawse-elves-pluff-prosy/test-mlw3-tawse-elves-pluff-prosy (npm)

The package @malware-test-tawse-elves-pluff-prosy/test-mlw3-tawse-elves-pluff-prosy was found to contain malicious code...

Malicious code in mango-sierra-ehjd (npm)

The package mango-sierra-ehjd was found to contain malicious code...

MAL-2025-6666 Malicious code in thehut (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-5798 Malicious code in teeble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 87deeee00c8045cff04871c3dacb0e761b812fb25c0622a5aa66bc034f16d61d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XXL SSO is vulnerable to an Open Redirect through malicious manipulation of the redirect_url argument

A vulnerability, which was classified as problematic, has been found in Xuxueli xxl-sso 1.1.0. This issue affects some unknown processing of the file /xxl-sso-server/doLogin. The manipulation of the argument redirecturl leads to open redirect. The attack may be initiated remotely. The exploit has...

MAL-2025-5428 Malicious code in kwp-a-b-testing (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-4828 Malicious code in espresso-idling-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 783a8905e5ae890747d02955448c18b9e8ea3bb082a9c12d5eea209a54c33297 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3682 Malicious code in feather-provider-filter (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c10e095a2bc88b96e5a1f9fabb7eefe0ff0596b0e3b3bf085fdcf95165c4689 Any computer that has this package installed or running should be considered...

MAL-2025-3488 Malicious code in doges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 318e443cd5d84f016e8bfb0f1d2bafd4ccc2749c5ba81e01f0175207db159d06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3297 Malicious code in keypair-encryptor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c02f1145632762977fc8763c9f6ee3f5c9272b45196357654217a1bc1ce13bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3043 Malicious code in @hongfangze/filestream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb8918dc757e8560ab3e6a414e7ce77f963e8f5a199d1b274ff4a402aabb9751 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...