MAL-2025-41822 Malicious code in cyclic-dep-explicit-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e587976f564b0bbbf5eaaed83fdbe6b64e1c989d0e1c90e13dc5e0b579193a1 The OpenSSF Package Analysis project identified 'cyclic-dep-explicit-1' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

CVE-2017-2966

creationtimestamp| type| source ---|---|--- 2025-08-31 03:01:13+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

Malicious code in @callcenter-frontend/services (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f985946c9433e8dec885ea60292e121e23ac3d9bbfe2f1cae80882b85ce1c29e The OpenSSF Package Analysis project identified...

Malicious code in @nx/js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b11cb4be7497510402676b2b593e6a5d3e0dee4e1443996403e8aa496f284f3 Summary Malicious versions of the nx package, as well as some supporting plugin packages, were published to npm, containing code that scans the file...

Malicious code in prettier-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dd4a56ce83136ba0c08709c38d11bee44b0351d7dd9c5bca68b457fcb1b44be9 The OpenSSF Package Analysis project identified 'prettier-v2' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41284 Malicious code in eslint-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc62673366ae7ad1109086b5169030e17b4ed81be6735878522392329ebca48c The OpenSSF Package Analysis project identified 'eslint-8' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-41286 Malicious code in eslint-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7b6f571e9facdadc164a1e0a5ed2a298a233bbc3138ef7df78bae9d0a3d588a4 The OpenSSF Package Analysis project identified 'eslint-9' @ 99.0.9 npm as malicious. It is considered malicious because: - The package...

CVE-2025-54813

creationtimestamp| type| source ---|---|--- 2025-08-22 16:25:24+00:00| seen| https://seclists.org/oss-sec/2025/q3/135 2025-08-22 18:53:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwz4xb5t5523 2025-08-22 19:01:44+00:00| seen|...

CVE-2024-48988

creationtimestamp| type| source ---|---|--- 2025-08-22 15:13:14+00:00| seen| https://seclists.org/oss-sec/2025/q3/133 2025-08-22 17:23:54+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwyxw5gsjc22 2025-08-22 18:38:45+00:00| seen|...

CVE-2025-57791

creationtimestamp| type| source ---|---|--- 2025-08-20 13:00:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115061215891033628 2025-08-20 14:35:34+00:00| seen| https://vulnerability.circl.lu/bundle/220707d1-7e3e-4ed1-af30-61e39ddf5b1f 2025-08-21 20:49:18+00:00| seen|...

CVE-2025-53192

creationtimestamp| type| source ---|---|--- 2025-08-18 18:16:20+00:00| seen| https://seclists.org/oss-sec/2025/q3/121 2025-08-19 00:08:12+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwpmni5hwr2u 2025-08-19 00:12:44+00:00| seen|...

MAL-2025-6897 Malicious code in swiv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 945d4a5f54e77ae66588b5b64aa30eb2627903bffcb72a3031b9c4b6b2122b43 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-6892 Malicious code in appcenterclient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1bc657665525c8990a4f9ac5c4f30181a8593678337e7f78667dfdba06d44922 The OpenSSF Package Analysis project identified 'appcenterclient' @ 7.7.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6883 Malicious code in @capacitor-bmo/biometric (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31e5db1d24cb68dbd291a2dc917c13515b048d4ae58196d9a921d4fea7382316 The OpenSSF Package Analysis project identified '@capacitor-bmo/biometric' @ 9999.0.1 npm as malicious. It is considered malicious because: - Th...

MAL-2025-6885 Malicious code in solana-pump-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4f33aa024a9c864923429d861e28123d1aaba539b1e235683189ca285697b572 The OpenSSF Package Analysis project identified 'solana-pump-test' @ 2.5.3 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6879 Malicious code in @yaqiguo/dnstest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3478ba78740bef836d1172c597de70dda1774f80ed7d9c3b8273dc9fbc9db71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-54409

creationtimestamp| type| source ---|---|--- 2025-08-14 17:01:42+00:00| seen| https://seclists.org/oss-sec/2025/q3/110 2025-08-14 19:51:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwf4gge6go2r 2025-08-15 18:18:15+00:00| seen|...

CVE-2025-54389

creationtimestamp| type| source ---|---|--- 2025-08-14 16:58:31+00:00| seen| https://seclists.org/oss-sec/2025/q3/109 2025-08-14 19:26:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwf2zpgb5d2r 2025-08-15 18:18:15+00:00| seen|...

CVE-2025-55675

creationtimestamp| type| source ---|---|--- 2025-08-14 11:23:00+00:00| seen| https://seclists.org/oss-sec/2025/q3/108 2025-08-14 13:55:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lweikou36f2r...

CVE-2025-55674

creationtimestamp| type| source ---|---|--- 2025-08-14 11:09:23+00:00| seen| https://seclists.org/oss-sec/2025/q3/107 2025-08-14 13:30:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lweh5v4hus2o 2025-08-14 15:02:16+00:00| seen|...