Malicious code in tensor-fi-crypto-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8cc30500616c36f3301bfeb5ec377ea53456fdfcbcb8fa1993346cb64958 The package tensor-fi-crypto-utils was found to contain malicious code...

MAL-2025-191597 Malicious code in tensor-fi-crypto-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ed8cc30500616c36f3301bfeb5ec377ea53456fdfcbcb8fa1993346cb64958 The package tensor-fi-crypto-utils was found to contain malicious code...

Important Photon OS Security Update - PHSA-2025-5.0-0691

Updates of 'linux-esx', 'cifs-utils', 'linux' packages of Photon OS have been released...

CVE-2025-64483

Wazuh is a security detection, visibility, and compliance open source project. From version 4.9.0 to before 4.13.0, the Wazuh API – Agent Configuration in certain configurations allows authenticated users with read-only API roles to retrieve agent enrollment credentials through the...

EUVD-2025-199381

Malicious code in @voiceflow/utils-designer npm...

EUVD-2025-199428

Malicious code in @voiceflow/backend-utils npm...

MAL-2025-191334 Malicious code in @voiceflow/backend-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 939c031191eb7578a914d631512a9cf7594b3fa8719c9d5a82dc8469a70a5a72 The package @voiceflow/backend-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191282 Malicious code in @oku-ui/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e363f9563598ec9e11de3c2f70d1e8f832d7cf86e80fa1ee85b454d7745c662 The package @oku-ui/utils was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-199123

Malicious code in m25-transaction-utils npm...

Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191127 Malicious code in m25-transaction-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e91218f5eaff53a78f8a4c20f4090ee4c99958d5784c54a3ee2280d00658643 The package m25-transaction-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199199

Malicious code in @varsityvibe/utils npm...

Malicious code in victoria-wallet-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52da1ed8745249f87107187efa740b8362b45543bfa3e003ebdfd585b2e7ef2e The package victoria-wallet-utils was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199203

Malicious code in victoria-wallet-utils npm...

MAL-2025-191148 Malicious code in victoria-wallet-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52da1ed8745249f87107187efa740b8362b45543bfa3e003ebdfd585b2e7ef2e The package victoria-wallet-utils was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @ensdomains/test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481ab00e5cd5767ce6cb39bcab250f36dca030dce7d89f8f41b0a2086e1ebdbb The package @ensdomains/test-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/rrweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de65400909e7dab680997106feffcc22e5a954f60fe775e82db28e5529bacb0c The package @posthog/rrweb-utils was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190675 Malicious code in @posthog/rrweb-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de65400909e7dab680997106feffcc22e5a954f60fe775e82db28e5529bacb0c The package @posthog/rrweb-utils was found to contain malicious code. Source: ghsa-malware...

Malicious Package

Overview lululemon-b2b-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...