MAL-2025-6676 Malicious code in undeface-test-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 69c9b501034a030dc669fcc1ae2026db2508367cac00b2b2b7e4d8df0a78ad7e The OpenSSF Package Analysis project identified 'undeface-test-2' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in undeface-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb90f4f82fed4d59ca2dcb3a39b4b93866778f4f52ae780393bdcf08e389be03 The OpenSSF Package Analysis project identified 'undeface-test' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6674 Malicious code in undeface-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb90f4f82fed4d59ca2dcb3a39b4b93866778f4f52ae780393bdcf08e389be03 The OpenSSF Package Analysis project identified 'undeface-test' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in req-pre-automate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6ce39a0e7a45f8d70e0e7e0d0e597b5029dcfcdd422ec0fec324921c5021a9ca If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

Malicious code in req-pre-automate1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d7e3b4390ccf704149d75e6c01eb4303d21c263875186c930181e0aa7ca6495b If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

Malicious code in test-package-avinav (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6665 Malicious code in test-package-avinav (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6664 Malicious code in test-confusion2 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in test-confusion2 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in test-confusion-detector (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6663 Malicious code in test-confusion-detector (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6662 Malicious code in test-confusion (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in test-confusion (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in npm-ot-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6643 Malicious code in npm-ot-test (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6481 Malicious code in common-test (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in common-test (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-6352 Malicious code in @hypervector/hypervector-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c545f2259849fbb80d4250dcbd736a7ec8fda86cb48ffb7b4a2b1b6eaacfa614 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @hypervector/hypervector-tbank-test is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization an...

MAL-2025-6351 Malicious code in @hypervector/hypervector-tbank-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae2dc7f1e6383a12599beba2e8e9b506edafebb226ed53ed821562057b794d64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...