Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

MAL-2025-44778 Malicious code in jiemi-xiyinli-fazede-zhenxiang (npm)

The package jiemi-xiyinli-fazede-zhenxiang was found to contain malicious code...

Malicious code in zaki-bakwan62-sukiwir (npm)

The package zaki-bakwan62-sukiwir was found to contain malicious code...

MAL-2025-9462 Malicious code in @taktikangea/quae-vero-sequi (npm)

The package @taktikangea/quae-vero-sequi was found to contain malicious code...

MAL-2025-9009 Malicious code in @malware-test-tipsy-jolls-sider-cares/test-mlw3-tipsy-jolls-sider-cares (npm)

The package @malware-test-tipsy-jolls-sider-cares/test-mlw3-tipsy-jolls-sider-cares was found to contain malicious code...

Malicious code in @malware-test-seifs-impot-basso-koban/test-mlw3-seifs-impot-basso-koban (npm)

The package @malware-test-seifs-impot-basso-koban/test-mlw3-seifs-impot-basso-koban was found to contain malicious code...