4541 matches found
MAL-2025-49186 Malicious code in epic-react-test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b754cb5a234d92fe76a481880c57c66b79992d80ef094a44a8e53c2b6f143edf The package epic-react-test-utils was found to contain malicious code...
MAL-2025-49105 Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7591712b2670c324bceb4a2e50ddcc9bd03c8992939343db9e97b8a6b23e44a0 The package @ra-web-tech-ui-toolkit/common-utils was found to contain malicious code...
MAL-2025-49141 Malicious code in epic-env-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f94098f216650c7955adfe4a82c23f4368b9cae20abff8da12aa162e4a8e8b4 The package epic-env-utils was found to contain malicious code...
MAL-2025-48780 Malicious code in tailwind-utils-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21ed8ff35970f72cb3baab16f272e85ee20139056fb86d4c04e90b28ba38f464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35795
Malicious code in discord-utils-enhanced npm...
MAL-2025-48878 Malicious code in test-utils-vue3 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in internal-test-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14723fa9c85ed09e8669f1e402756b97ce2654f9e2b222a57ca6d539d73afc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-48787 Malicious code in acme-auth-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in acme-auth-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in global-utils-helper-2025 (npm)
The package communicates with a domain associated with malicious activity...
Use of Hard-coded Cryptographic Key
Overview Affected versions of this package are vulnerable to Use of Hard-coded Cryptographic Key for encrypting sensitive configurations when NeuVector stores data. The static key can be used to retrieve configuration data. Remediation Upgrade github.com/neuvector/neuvector/share/utils to version...
Malicious code in ofjaaaah-helper-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c29444c36fe6eb68b1d21e6dfa6d59cd4cdf3477983d56e62b4c92d36d60476 Any computer that has this package installed or running should be considered...
MAL-2025-48749 Malicious code in ofjaaaah-helper-utils (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c29444c36fe6eb68b1d21e6dfa6d59cd4cdf3477983d56e62b4c92d36d60476 Any computer that has this package installed or running should be considered...
Malicious Package
Overview @jdtaro/dynamic-devtools-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and thi...
Malicious code in @jdtaro/dynamic-devtools-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 31153e0cd25bffc9c1582e7fe176e131e49c4a1fdfdc58c55cdf25dcd99a5b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-35150
Malicious code in @jdtaro/dynamic-devtools-utils npm...
EUVD-2025-35138
Malicious code in reactify-utils npm...
Malicious Package
Overview reactify-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
