EUVD-2025-36752

Malicious code in xo-ui-components npm...

Malicious Package

Overview xo-ui-components is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in xo-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58815a099f64599f6c8c7778c42dc78094abeace3c685c538fe1ee5604b86818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-49075 Malicious code in xo-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58815a099f64599f6c8c7778c42dc78094abeace3c685c538fe1ee5604b86818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @basic-ui-components-stc/basic-ui-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47420 Malicious code in @basic-ui-components-stc/basic-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c7cc4b06e4071b6e4613358e926ea521ee3acb2223670ed3783c57abb5c0567 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sema-ui-components (npm)

The package sema-ui-components was found to contain malicious code...

Malicious code in mojo-ui-components (npm)

The package mojo-ui-components was found to contain malicious code...

MAL-2025-26615 Malicious code in mojo-ui-components (npm)

The package mojo-ui-components was found to contain malicious code...

MAL-2025-15813 Malicious code in blaze-ui-components-site (npm)

The package blaze-ui-components-site was found to contain malicious code...

MAL-2025-32927 Malicious code in sema-ui-components (npm)

The package sema-ui-components was found to contain malicious code...

Malicious code in ppms-ui-components (npm)

The package ppms-ui-components was found to contain malicious code...

MAL-2025-29573 Malicious code in ppms-ui-components (npm)

The package ppms-ui-components was found to contain malicious code...

Malicious code in mpesa-ui-components (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-6736 Malicious code in mpesa-ui-components (npm)

The package communicates with a domain associated with malicious activity...

Malware in @forge-ui-components/media-player

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in k6-studio-ui-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5786 Malicious code in k6-studio-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 066503bf35690fb58f38fa44cc7e64d0eaf5a0e5f352167029b6a5ed00a448b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in confluence-ui-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5680 Malicious code in confluence-ui-components (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb63632dfb2a63f6c418382e8084ef144345f9f1ffc39d5980bacfc336cf09ab Any computer that has this package installed or running should be considered...