MAL-2025-47845 Malicious code in chia.dock1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26caa58ce2e667f101c3a56e08b3d2215d71ce03b48bf8ec8c162b5725b171d8 Any computer that has this package installed or running should be considered...

Malicious code in spayee-micro-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16d410f61fc4213f1ca0f3f16618828e186e9c5c6b130545bdb49eb4c0d68ec5 Any computer that has this package installed or running should be considered...

Vulnerability-identification-and-Mitigation

It is an offensive tool for source code and SMS message analysis...

Malicious code in riyu-xuexi-jiaming-biaozhu-erlingerlinglingsi-erlingerlinglingliu (npm)

The package riyu-xuexi-jiaming-biaozhu-erlingerlinglingsi-erlingerlinglingliu was found to contain malicious code...

Malicious code in tuti-enting61-kyuki (npm)

The package tuti-enting61-kyuki was found to contain malicious code...

MAL-2025-44634 Malicious code in how-to-win-free-fortnite-v-bucks-zfzefzf (npm)

The package how-to-win-free-fortnite-v-bucks-zfzefzf was found to contain malicious code...

CVE-2025-58460

creationtimestamp| type| source ---|---|--- 2025-09-03 15:27:52+00:00| seen| Telegram/rUygNacqvHQ7zscrIbwNKaf9IBqEQGgYFFuOPmnQf1sZw7E...

MAL-2025-41512 Malicious code in @twork-data-services/proxy-ips-account-account-number-prepaid-card-limits (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in website-memory (npm)

The package communicates with a domain associated with malicious activity...

K000153107: Python tarfile Vulnerabilities CVE-2025-4138, CVE-2025-4330

Security Advisory Description CVE-2025-4138 Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar...

MAL-2025-6895 Malicious code in commonweb-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c019e3086bf1cec9b859c8fe048187fc7cf6dc866de93fbd0ff2182b3e4fc0a The OpenSSF Package Analysis project identified 'commonweb-setup' @ 10.11.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @malware-test-natch-fifes-niefs-dumky/test-mlw3-natch-fifes-niefs-dumky (npm)

The package @malware-test-natch-fifes-niefs-dumky/test-mlw3-natch-fifes-niefs-dumky was found to contain malicious code...

Malicious code in avail-able-albu-m-down-load-43854-home-plate-cfjtj-akqpps (npm)

The package avail-able-albu-m-down-load-43854-home-plate-cfjtj-akqpps was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-23296-triumph-eb5kv-wzigao (npm)

The package new-al-bum-av-ailable-23296-triumph-eb5kv-wzigao was found to contain malicious code...

Malicious code in @malware-test-safes-absey-micos-aggro/test-mlw3-safes-absey-micos-aggro (npm)

The package @malware-test-safes-absey-micos-aggro/test-mlw3-safes-absey-micos-aggro was found to contain malicious code...

MAL-2025-18704 Malicious code in down-lo-ad-now-zip-mp3-i-am-the-fun-blame-monster-31e3h-wgxkex (npm)

The package down-lo-ad-now-zip-mp3-i-am-the-fun-blame-monster-31e3h-wgxkex was found to contain malicious code...

Malicious code in down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck (npm)

The package down-lo-ad-now-zip-mp3-37967-duality-g5efy-wezkck was found to contain malicious code...

Malicious code in avail-able-albu-m-down-load-441605-doom-crew-inc-ckkyk-vizpqd (npm)

The package avail-able-albu-m-down-load-441605-doom-crew-inc-ckkyk-vizpqd was found to contain malicious code...

Malicious code in new-al-bum-av-ailable-17746-here-my-dear-8zdhb-bwjsfw (npm)

The package new-al-bum-av-ailable-17746-here-my-dear-8zdhb-bwjsfw was found to contain malicious code...

Malicious code in @malware-test-white-brake-daffy-sarge/test-mlw3-white-brake-daffy-sarge (npm)

The package @malware-test-white-brake-daffy-sarge/test-mlw3-white-brake-daffy-sarge was found to contain malicious code...