EUVD-2025-205800

Malicious code in @bugdtest/test1 npm...

Malicious Package

Overview @bugdtest/test1 is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-192963 Malicious code in @bugdtest/test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566749f80686d2357340c2b5168e4bcfa5325ef16ac486be884d76778a25b5c3 The package @bugdtest/test1 was found to contain malicious code. Source: ghsa-malware d0f199c82abe08a5f5512596124dac3897cfaf75367ba53fb532f76e23474cb...

flowise (>=1.6.1 <=2.2.8), flowise-birat (>=1.0.0 <=1.2.5) +2 more potentially affected by unknown CVE via flowise-ui (>=1.8.4 <=2.2.8)

flowise-ui NPM version =1.8.4, =1.6.1, =1.0.0, =0.0.1, =0.0.2, =0.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-FJH6-8679-9PCH...

flowise (>=1.6.1 <=2.2.8), flowise-birat (>=1.0.0 <=1.2.5) +2 more potentially affected by unknown CVE via flowise-ui (>=1.8.4 <=2.2.8)

flowise-ui NPM version =1.8.4, =1.6.1, =1.0.0, =0.0.1, =0.0.2, =0.0.4 Source cves: unknown CVE Source advisory: OSV:GHSA-X39M-3393-3QP4...

MAL-2025-47851 Malicious code in metereorpreter-test1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in metereorpreter-test1 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in pickmeo-test1 (npm)

The package pickmeo-test1 was found to contain malicious code...

MAL-2025-29228 Malicious code in pickmeo-test1 (npm)

The package pickmeo-test1 was found to contain malicious code...

Malicious code in unscoped-test1 (npm)

The package unscoped-test1 was found to contain malicious code...

Malicious code in @nomicsfoundation/sdk-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd1a561b2ed5703af862c67f4c412afa3ba942efe78ee0b7fc55066fc7c8c316 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

al-for-design (=0.0.1), autogluon (>=0.0.4 <=0.5.3b20221014) +42 more potentially affected by CVE-2024-12216 via gluoncv (>=0.10.3.post0 <=0.9.0)

gluoncv PYPI version =0.10.3.post0, =0.0.4, =0.0.15b20201024, =0.0.15b20201024, =0.0.15b20201024, =1.0.0, =0.1.1, =0.1.0, =0.0.6, =0.0.3, =0.0.1, =0.0.20 - monk-colab =0.0.1 - monk-colab-test =0.0.1 - monk-cpu =0.0.1 - monk-cpu-test =0.0.11 and more Source cves: CVE-2024-12216 Source advisory:...

Malicious code in amis-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 907fed13cac56efe0df742c4ebb89e8e62fd4df5e4d284ebc7dd48a848a0647d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

gpt-cli (>=0.0.13 <=0.0.20), htmlentity (>=0.1.0 <=1.2.0) +4 more potentially affected by unknown CVE via grcov (>=0.5.15 <=0.8.13)

grcov CARGO version =0.5.15, =0.0.13, =0.1.0, =0.2.0, =0.2.3 - rye-grain =0.0.1 - slobberchops-test1 =1.4.0 Source cves: unknown CVE Source advisory: OSV:GHSA-QM2P-4W45-V2VR...

gpt-cli (>=0.0.13 <=0.0.20), htmlentity (>=0.1.0 <=1.2.0) +4 more potentially affected by unknown CVE via grcov (>=0.5.15 <=0.8.13)

grcov CARGO version =0.5.15, =0.0.13, =0.1.0, =0.2.0, =0.2.3 - rye-grain =0.0.1 - slobberchops-test1 =1.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0005...

MAL-2024-7754 Malicious code in moti-another-test1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef9ba3bd258d7a35bb24b7e3d9c54bed26b8ff091779c7a2b571f584be74aba2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-3124 Malicious code in tilled-examples-test1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tilled-examples-test1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dc-test1-asdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04026ef40e4abce9afd70341d1bbb7d8907a917e7a6bd0fd6b7ffb15623a30c0 The OpenSSF Package Analysis project identified 'dc-test1-asdf' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1619 Malicious code in dc-test1-asdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04026ef40e4abce9afd70341d1bbb7d8907a917e7a6bd0fd6b7ffb15623a30c0 The OpenSSF Package Analysis project identified 'dc-test1-asdf' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...