Lucene search
+L
OSSF Malicious PackagesRecent

238403 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 6:13 p.m.•32 views

Malicious code in fdhcxvnwhjiofv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7125babb23f8900d46ed2c500ef373d4de463c6260810c17719922435bdac54 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

5.7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 6:08 p.m.•35 views

Malicious code in oracle-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6 The package publishes as oracle-redis but ships a verbatim copy of the ioredis README, source tree, and repository URL...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 6:07 p.m.•34 views

Malicious code in noverojava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7fbf0d1519b05868b34e9e2c1d3588a0596003a5cb53e4cd28fd3a856ecff26 package.json declares the runtime dependency libsignal as github:tenka-san/libsignal-node rather than a registry version range or pinned commit SHA. ...

5.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 6:06 p.m.•36 views

Malicious code in nodetokyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec0e3f7b963353d4d2928e12ca3898cce5100ed3e3537383faa9c7f9a93f203 The package's declared main launcher.js executes launch at module top level, so require'nodetokyo' automatically installs Python 3.12 via winget or b...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:46 p.m.•37 views

Malicious code in zeal-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7a4b9b4fcb0a48aa3602fc7bc865eff738f8ab42a4c9e56ea31e70b0b6b826f canary.js in [email protected] collects host reconnaissance data os.hostname, os.userInfo, process.platform, cwd, node version and POSTs it to the...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:46 p.m.•31 views

Malicious code in zeal-util-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9ed95500d2f1c637bcf47151a9220c0a81ee6cbd7a7aa4a8f66c74fed6e341 postinstall.js and index.js load canary.js, which POSTs a JSON payload to https://npm-canary.aveliscare.com/beacon at install time and on require. Th...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:41 p.m.•28 views

Malicious code in style-class-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:41 p.m.•27 views

Malicious code in speaker_tagging_media_player (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:41 p.m.•29 views

Malicious code in spark-rpc (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:40 p.m.•31 views

Malicious code in spark-common (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:33 p.m.•27 views

Malicious code in mx-www-locales-common (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:32 p.m.•26 views

Malicious code in mercuriusdream-oidc-replay-probe (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:31 p.m.•33 views

Malicious code in eslint-config-compact-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414c7f8397efb591ffe6f87f9c44e8eb803606eb4789d357abe337d3225cc46f On require, index.js collects host reconnaissance data os.hostname, os.userInfo.username, os.platform, architecture, Node version, current working...

5.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:28 p.m.•22 views

Malicious code in halali-sample (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:25 p.m.•32 views

Malicious code in exodus-firestore-synchronize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210b71fe2403143719408cea9a34626d7788c9aaa87b3f5a1276a92bd5578ce6 package.json declares a postinstall hook that auto-runs on npm install and executes whoami and hostname, then enumerates process.env for keys matchin...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:14 p.m.•23 views

Malicious code in @yuva2210/poc-depconf (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:14 p.m.•23 views

Malicious code in @yuva2210/okx-poc-preinstall (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:11 p.m.•24 views

Malicious code in @ssgw/background-transition (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:06 p.m.•24 views

Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7279432ffb7dc233307df869ac5faaded0fef16333ec8a5948b15bae7bd716a7 The package was found to contain malicious code or consuming dependency that contains malicious code...

5.7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:06 p.m.•24 views

Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:06 p.m.•23 views

Malicious code in @larocas-bbresearch/tombstone-probe-odvz5y (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8361724bb70f161c897f4b6cc3cfb8d2dd3acf32295a4e32181c8a16dd58d13 The package was found to contain malicious code or consuming dependency that contains malicious code...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:06 p.m.•26 views

Malicious code in @larocas-bbresearch/tombstone-probe-live-z6xz56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8eb64220c40c3aaf61d0c2911ff0950a968c4c03d9ba2af1620420077f532a2d The package was found to contain malicious code or consuming dependency that contains malicious code...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:06 p.m.•25 views

Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8656a15600371992dd90c60b5c0280339218d62a8f22473380f37eaf8d952e9b The package was found to contain malicious code or consuming dependency that contains malicious code...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:06 p.m.•23 views

Malicious code in @ks-cqc/fingerprint-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:06 p.m.•28 views

Malicious code in @ks-cqc/h5-sig4 (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:03 p.m.•26 views

Malicious code in @egencia/uitk-react-text (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:03 p.m.•24 views

Malicious code in @egencia/uitk-react-spacing (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:03 p.m.•26 views

Malicious code in @egencia/uitk-react-layout-flex (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:03 p.m.•28 views

Malicious code in @egencia/uitk-react-foundation (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:03 p.m.•30 views

Malicious code in @egencia/uitk-global-styles-6 (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:03 p.m.•27 views

Malicious code in @egencia/uitk-react (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:03 p.m.•32 views

Malicious code in @egencia/uitk-global-styles (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:03 p.m.•28 views

Malicious code in @egencia/design-tokens (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•29 views

Malicious code in @client-web-next/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•33 views

Malicious code in @client-web-next/ui (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•30 views

Malicious code in @client-web-next/ui-business (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•31 views

Malicious code in @client-web-next/ua-parser (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•38 views

Malicious code in @client-web-next/transfer-state (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•30 views

Malicious code in @client-web-next/tarjeta-button (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•28 views

Malicious code in @client-web-next/timer (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•29 views

Malicious code in @client-web-next/origination-microfront (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•30 views

Malicious code in @client-web-next/providers (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•27 views

Malicious code in @client-web-next/logger (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•29 views

Malicious code in @client-web-next/navigation-link (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•25 views

Malicious code in @client-web-next/footer (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•30 views

Malicious code in @client-web-next/icons (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•29 views

Malicious code in @client-web-next/feature-flags (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•32 views

Malicious code in @client-web-next/event-bus-listener (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•29 views

Malicious code in @client-web-next/env-util (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/22 5:02 p.m.•23 views

Malicious code in @client-web-next/cms (npm)

--- -= Per source details. Do not edit below this line.=-...

5.8AI score
SaveExploits0
Total number of security vulnerabilities238403