239675 matches found
MAL-2025-6466 Malicious code in bmlx-openapi-client (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6125 Malicious code in slf4j-api (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7ccd4cc3b9a566cde097a25dda1efca4dc2bc70d632e77b01f3e21128e03356 Any computer that has this package installed or running should be considered...
MAL-2025-5937 Malicious code in neolang-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41d15d10a19dc41dd5c801307932369ed7f51380fcc0fdb1478e0ac2b7ce9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-191733 Malicious code in fonafx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9441463f029726ea263225e9b0092d82b049e2d7a4e059becd24f5e23c70a906 Series of packages mostly with an obfuscated infostealer attempting to collect Chrome data. While discord webhook is usually set to an example, there are other...
MAL-2025-5095 Malicious code in aliyun-ai-labs-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4350 Malicious code in garena-admin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53e17b9725323610c84d0eef5b07fd9caf89a9ee0ad67d94c35a07c61abdafbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-3375 Malicious code in afterlogic-aurora-platform (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3350 Malicious code in @sporta-technology/d11-web-components.table-cells.tc-avatars (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3143 Malicious code in arnotest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-1367 Malicious code in jbrowse (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 718122d6ef307a963a9df00b5272528ab1af438eb21e93463a4fec2fb65e70ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-191781 Malicious code in lightgboost (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 03aea882aa08832e53ccfb267fe4b95c9ea4f24ea51ceeaaa4a85557e67ce15b Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...
MAL-2025-178 Malicious code in dbx-js-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2191dabfd9180ad79d00f6678faee7b75417b6a5ee484798bff290a81fa0d56 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11710 Malicious code in solana-account-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11518 Malicious code in aiocpa (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11186 Malicious code in cdp-agentkit-nodejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d53da33893272680319756bf6d56dbd2de8b7d06bc19bd46c65f06c11336031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11183 Malicious code in @solana/web3.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507e136eb7d13bd9c88a5e20d692768a759c2ae382d1ab54ba66c196b560cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9181 Malicious code in script-updated-gta-5-ragemp-spoofer-hwid-unban-zcnl0m (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00fcb4f478bf592c6510a3d43d07dfc4d63123c22879dd45abe95f02e9b22006 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8830 Malicious code in snacks-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a8a3330ca1864b23cbe8bbc0eb833f73409c288067d5d19632ac829de559932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8406 Malicious code in @diotoborg/libero-ratione-delectus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e03dc878ba32f02ed8a95a2b374d2309303b2e1b73e66f470041bb5e2298f62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7771 Malicious code in express-jwt-v6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648 The OpenSSF Package Analysis project identified 'express-jwt-v6' @ 6.0.6 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7753 Malicious code in jfrog-jfconfig-grpc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 177a2d1912b1051b4347d51ff6410db1077d40c3cd21468d673acef023e3e1da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7423 Malicious code in dependent-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70f70c2dd1e2fa144fb729148ad1259433561dcfc205e028a514ea1fc4c6a65a The OpenSSF Package Analysis project identified 'dependent-package' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-6534 Malicious code in airbrake-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5574 Malicious code in public-address-generator (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5381 Malicious code in mult-flow (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2607 Malicious code in lib-comdig (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1841 Malicious code in brkr-lib-components-react (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3239 Malicious code in @pragatib20/trim-right (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1658 Malicious code in nt4padyp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 813b8cef8cb7a828bbbf2b8edb29b1bbba72c65e7654fe80f07a80398a9e5133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1593 Malicious code in ato-z-web-identity-components-app-cdk-adp-wrapper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c33c62d31d74de8fa6a7a3911507ce9a8d513bccb45ff1b51b7fbb9068920d3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1198 Malicious code in locus-website (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae618c99394568c62b082d0c55c5da01da065e9ad01343f5737caf05685612b8 The OpenSSF Package Analysis project identified 'locus-website' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1153 Malicious code in gatsby-theme-deriv (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32ede5793754442e2e56bdb177dea81b15771050ced8976b1958a4eff4cd2b9c The OpenSSF Package Analysis project identified 'gatsby-theme-deriv' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1127 Malicious code in tslint-slick (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2759b172d96a68a7783fab890e408535923abfd9ef8760d01d1e9f12f7dd0ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1026 Malicious code in ent-profile-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9c39ae8dadaf1b8ac82e8e1f7b312d04c58cb2a208ba535221cae3bac7ae787 The OpenSSF Package Analysis project identified 'ent-profile-api-client' @ 9.3.1 npm as malicious. It is considered malicious because: - The...
MAL-2024-917 Malicious code in pushpress (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12aee1451d6c71b0a5a70e5022a0911c2c2ba4d006a2ccb4af151daca6df1c2d The OpenSSF Package Analysis project identified 'pushpress' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-165 Malicious code in distube-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ac3f289f159fa4961391d20b8dbb4b10a0467ac4654073bcc0aa7863caf8cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8717 Malicious code in crossdomain-xhr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab343d1f78365f0bc2589bd835b94aa0fd90723d8e80a9d0b774a3a99589b0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8509 Malicious code in zoo-a11y-tests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f46f844f7e5b737f7ab6feb22cb90afaa4343ce46ab584193068d36497fb8ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8507 Malicious code in ifl-tokens (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32da3cff60acce4a954d540581c8ec4d603e8375fcb3043506346a4929bf9c7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8472 Malicious code in data-type-public (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90c26075e74ebc9cae6a492f997974105a4951be23a89236c7e84a0a9e169933 The OpenSSF Package Analysis project identified 'data-type-public' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8453 Malicious code in classnames-benchmarks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04617c1a9f99b39025630b22b77e5338cd0a07452a2ba6384557f2308b4379e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8452 Malicious code in bt8-wax-front-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94edc2702431bf0ca422456566133b260f48b21d456989d157837fbf5e4d80ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8436 Malicious code in onsurity-onboarding (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f08d8e742760f69f6a097c7eae74d85b4135241f48e47d2ee27f867e319550a5 The OpenSSF Package Analysis project identified 'onsurity-onboarding' @ 0.1.0 npm as malicious. It is considered malicious because: - The packag...
MAL-2023-8416 Malicious code in idme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59bf5be80aa56e65bc3e5000865abe09b7f0f0a8b23978c69c841e75a6c5503c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8398 Malicious code in @tpci/i18next-ext (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14a4fd8041934f617af9e84fb00ca939b961316d3d7b9519c286dd93035801c8 The OpenSSF Package Analysis project identified '@tpci/i18next-ext' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-8393 Malicious code in z-dsm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2e8df0358f7f04a5b41981e5e7496d99d985f9e76087b0e3a233566f9ddfd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8349 Malicious code in slot-qris-situs-slot-mudah-maxwin-24-jam-online-terpercaya (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7024e3e37cd20e39f30c363c32d2da667b32231695491e01709a7ed3fad3a09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8337 Malicious code in daftar-situs-judi-slot-online-gacor-gampang-menang-2023 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 874ee3a246bc3bbd51e905fd836bf877f706ac1af5c87f99eea71cc299b975a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8329 Malicious code in com.immutable.unitysdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5169fcc0ce37e587c7680742027ad143ea18826d2290cbe5a8c9bdb69095fef0 The OpenSSF Package Analysis project identified 'com.immutable.unitysdk' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2023-8287 Malicious code in materialxview (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b0129f95fe66ebf987bfa6a5be63ab5f66e779e9f3f2ce406d0966d43f75db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...