https://advisories.gitlab.com/npm/@emilgroup/commission-sdk/GMS-2026-14/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-14 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@thangved/callback-window/MAL-2025-47281/
Malicious code in @thangved/callback-window (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47281 Malicious code in @thangved/callback-window (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens...
malicious codecallback
https://advisories.gitlab.com/npm/xo-styles/MAL-2025-49071/
Malicious code in xo-styles (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49071 Malicious code in xo-styles (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codexostylesnpmgitlab
https://advisories.gitlab.com/npm/airbnb-base-typescript-prettier/MAL-2025-48977/
Malicious code in airbnb-base-typescript-prettier (npm) | GitLab Advisory Database (GLAD)
MAL-2025-48977 Malicious code in airbnb-base-typescript-prettier (npm): This malicious package was published during the PhantomRaven NPM campaign. The...
malicious code
https://advisories.gitlab.com/npm/@operato/utils/MAL-2025-47263/
Malicious code in @operato/utils (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47263 Malicious code in @operato/utils (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codeutilsnpmgitlabadvisory
https://advisories.gitlab.com/npm/sort-keys-plus/MAL-2025-49044/
Malicious code in sort-keys-plus (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49044 Malicious code in sort-keys-plus (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codesortkeys
https://advisories.gitlab.com/npm/angulartics2/MAL-2025-47172/
Malicious code in angulartics2 (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47172 Malicious code in angulartics2 (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codenpmgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@teselagen/ui/MAL-2025-47280/
Malicious code in @teselagen/ui (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47280 Malicious code in @teselagen/ui (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codeuinpmgitlabadvisory
https://advisories.gitlab.com/npm/closure-es6/MAL-2025-17150/
Malicious code in closure-es6 (npm) | GitLab Advisory Database (GLAD)
MAL-2025-17150 Malicious code in closure-es6 (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codeclosurenpmgitlabadvisory
https://advisories.gitlab.com/npm/@pypestream/floating-ui-dom/GMS-2026-54/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-54 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/mcp-knowledge-graph/MAL-2025-47327/
Malicious code in mcp-knowledge-graph (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47327 Malicious code in mcp-knowledge-graph (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codeknowledge graphmcp
https://advisories.gitlab.com/npm/create-hest-app/MAL-2025-47303/
Malicious code in create-hest-app (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47303 Malicious code in create-hest-app (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codecreatehest
https://advisories.gitlab.com/npm/durablefunctionsmonitor-vscodeext/MAL-2025-48993/
Malicious code in durablefunctionsmonitor-vscodeext (npm) | GitLab Advisory Database (GLAD)
MAL-2025-48993 Malicious code in durablefunctionsmonitor-vscodeext (npm): This malicious package was published during the PhantomRaven NPM campaign. The...
malicious codenpmgitlabadvisorydatabase
https://advisories.gitlab.com/npm/xo-shipping-change/MAL-2025-49069/
Malicious code in xo-shipping-change (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49069 Malicious code in xo-shipping-change (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codexoshipping
https://advisories.gitlab.com/npm/@crowdstrike/commitlint/MAL-2025-47233/
Malicious code in @crowdstrike/commitlint (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47233 Malicious code in @crowdstrike/commitlint (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens...
malicious codecrowdstrikecommitlintnpmgitlab
https://advisories.gitlab.com/npm/syntax-dynamic-import/MAL-2025-49046/
Malicious code in syntax-dynamic-import (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49046 Malicious code in syntax-dynamic-import (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codesyntaxdynamic
https://advisories.gitlab.com/npm/important-stuff/MAL-2025-49009/
Malicious code in important-stuff (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49009 Malicious code in important-stuff (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codeimportant stuffnpmgitlabadvisory
https://advisories.gitlab.com/npm/globalize-rpk/MAL-2025-47315/
Malicious code in globalize-rpk (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47315 Malicious code in globalize-rpk (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codeglobalizerpknpmgitlab
https://advisories.gitlab.com/npm/ts-imports/MAL-2025-47355/
Malicious code in ts-imports (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47355 Malicious code in ts-imports (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials...
malicious codetsnpmgitlabadvisory
https://advisories.gitlab.com/npm/capacitor-notificationhandler/MAL-2025-47394/
Malicious code in capacitor-notificationhandler (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47394 Malicious code in capacitor-notificationhandler (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals...
malicious codecapacitornpmgitlabadvisory
https://advisories.gitlab.com/npm/@emilgroup/task-sdk-node/GMS-2026-43/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-43 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@nativescript-community/ui-material-bottomsheet/MAL-2025-47156/
Malicious code in @nativescript-community/ui-material-bottomsheet (npm) | GitLab Advisory Database...
MAL-2025-47156 Malicious code in @nativescript-community/ui-material-bottomsheet (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious...
malicious code
https://advisories.gitlab.com/npm/db-evo/MAL-2025-47400/
Malicious code in db-evo (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47400 Malicious code in db-evo (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and...
malicious codedbevonpmgitlab
https://advisories.gitlab.com/npm/discord-open-source/MAL-2025-47583/
Malicious code in discord-open-source (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47583 Malicious code in discord-open-source (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codeopen sourcediscord
https://advisories.gitlab.com/npm/xo-validation/MAL-2025-49076/
Malicious code in xo-validation (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49076 Malicious code in xo-validation (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codexovalidationnpmgitlab
https://surface.syr.edu/eecs_etd/64/
"Surviving malicious code attacks" by Haizhi Xu
The goal of the research presented in this dissertation is to prevent, detect, and mitigate malicious code attacks that modify the legitimate program control...
malicious codesurvivingattacksxu
https://advisories.gitlab.com/npm/@art-ws/di/MAL-2025-47375/
Malicious code in @art-ws/di (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47375 Malicious code in @art-ws/di (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials...
malicious codein artws
https://advisories.gitlab.com/npm/oradm-to-sqlz/MAL-2025-47337/
Malicious code in oradm-to-sqlz (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47337 Malicious code in oradm-to-sqlz (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious code
https://advisories.gitlab.com/npm/@things-factory/auth-base/MAL-2025-47283/
Malicious code in @things-factory/auth-base (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47283 Malicious code in @things-factory/auth-base (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens...
malicious code
https://advisories.gitlab.com/npm/@teselagen/range-utils/MAL-2025-47276/
Malicious code in @teselagen/range-utils (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47276 Malicious code in @teselagen/range-utils (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious coderange
https://advisories.gitlab.com/npm/@ctrl/torrent-file/MAL-2025-47142/
Malicious code in @ctrl/torrent-file (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47142 Malicious code in @ctrl/torrent-file (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codetorrent filectrl
https://advisories.gitlab.com/npm/koa2-swagger-ui/MAL-2025-47187/
Malicious code in koa2-swagger-ui (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47187 Malicious code in koa2-swagger-ui (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codeswagger ui
https://advisories.gitlab.com/npm/badgekit-api-client/MAL-2025-48774/
Malicious code in badgekit-api-client (npm) | GitLab Advisory Database (GLAD)
MAL-2025-48774 Malicious code in badgekit-api-client (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codeapi client
https://advisories.gitlab.com/npm/filename-rules/MAL-2025-49003/
Malicious code in filename-rules (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49003 Malicious code in filename-rules (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codefilenamerulesnpmgitlab
https://advisories.gitlab.com/npm/jsx-a11y/MAL-2025-49016/
Malicious code in jsx-a11y (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49016 Malicious code in jsx-a11y (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals tokens...
malicious codejsxnpmgitlabadvisory
https://advisories.gitlab.com/npm/skyscanner-with-prettier/MAL-2025-49041/
Malicious code in skyscanner-with-prettier (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49041 Malicious code in skyscanner-with-prettier (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious...
malicious codeskyscanner
https://advisories.gitlab.com/npm/vuejs-accessibility/MAL-2025-49064/
Malicious code in vuejs-accessibility (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49064 Malicious code in vuejs-accessibility (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codevuejsaccessibilitynpmgitlab
https://advisories.gitlab.com/npm/chromestatus-openapi/MAL-2024-7783/
Malicious code in chromestatus-openapi (npm) | GitLab Advisory Database (GLAD)
MAL-2024-7783 Malicious code in chromestatus-openapi (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codeopenapinpmgitlabadvisory
https://advisories.gitlab.com/npm/mobioffice-cli/MAL-2025-47404/
Malicious code in mobioffice-cli (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47404 Malicious code in mobioffice-cli (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codemobiofficeclinpmgitlab
https://advisories.gitlab.com/npm/eslint-disable-next-line/MAL-2025-48996/
Malicious code in eslint-disable-next-line (npm) | GitLab Advisory Database (GLAD)
MAL-2025-48996 Malicious code in eslint-disable-next-line (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious...
malicious codenext line
https://advisories.gitlab.com/npm/dynamic-import-webpack/MAL-2025-19031/
Malicious code in dynamic-import-webpack (npm) | GitLab Advisory Database (GLAD)
MAL-2025-19031 Malicious code in dynamic-import-webpack (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codedynamicimport
https://advisories.gitlab.com/npm/xo-login-components/MAL-2025-49068/
Malicious code in xo-login-components (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49068 Malicious code in xo-login-components (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codexo
https://advisories.gitlab.com/npm/@hestjs/validation/MAL-2025-47245/
Malicious code in @hestjs/validation (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47245 Malicious code in @hestjs/validation (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codevalidationnpmgitlabadvisory
https://advisories.gitlab.com/npm/airbnb-lite/MAL-2025-14193/
Malicious code in airbnb-lite (npm) | GitLab Advisory Database (GLAD)
MAL-2025-14193 Malicious code in airbnb-lite (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codeairbnblitenpmgitlab
https://advisories.gitlab.com/npm/mycli123/MAL-2025-42032/
Malicious code in mycli123 (npm) | GitLab Advisory Database (GLAD)
MAL-2025-42032 Malicious code in mycli123 (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals tokens...
malicious codenpmgitlabadvisorydatabase
https://advisories.gitlab.com/npm/yoo-styles/MAL-2025-47230/
Malicious code in yoo-styles (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47230 Malicious code in yoo-styles (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials...
malicious codeyoostylesnpmgitlab
https://advisories.gitlab.com/npm/pm2-gelf-json/MAL-2025-47339/
Malicious code in pm2-gelf-json (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47339 Malicious code in pm2-gelf-json (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codegelf
https://advisories.gitlab.com/npm/@emilgroup/insurance-sdk/GMS-2026-26/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-26 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@emilgroup/discount-sdk-node/GMS-2026-19/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-19 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://cwe.mitre.org/data/definitions/506.html
CWE - CWE-506: Embedded Malicious Code (4.20)
Common Weakness Enumeration (CWE) is a list of software weaknesses.
malicious codecweembedded
https://advisories.gitlab.com/npm/voip-callkit/MAL-2025-47416/
Malicious code in voip-callkit (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47416 Malicious code in voip-callkit (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codevoipnpmgitlabadvisory
https://advisories.gitlab.com/npm/@yoobic/yobi/MAL-2025-47292/
Malicious code in @yoobic/yobi (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47292 Malicious code in @yoobic/yobi (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codeyoobicyobinpmgitlab
https://advisories.gitlab.com/npm/oclif-typescript/MAL-2025-42050/
Malicious code in oclif-typescript (npm) | GitLab Advisory Database (GLAD)
MAL-2025-42050 Malicious code in oclif-typescript (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codeocliftypescriptnpmgitlab
https://advisories.gitlab.com/npm/@emilgroup/document-sdk/GMS-2026-20/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-20 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@ctrl/qbittorrent/MAL-2025-47138/
Malicious code in @ctrl/qbittorrent (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47138 Malicious code in @ctrl/qbittorrent (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codectrlqbittorrentnpmgitlab
https://advisories.gitlab.com/npm/wdio-web-reporter/MAL-2025-47361/
Malicious code in wdio-web-reporter (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47361 Malicious code in wdio-web-reporter (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codeweb reporter
https://advisories.gitlab.com/npm/airpilot/MAL-2025-47295/
Malicious code in airpilot (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47295 Malicious code in airpilot (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials...
malicious codeairpilotnpmgitlabadvisory
https://advisories.gitlab.com/npm/ng-imports-checker/MAL-2025-47423/
Malicious code in ng-imports-checker (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47423 Malicious code in ng-imports-checker (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codengimports
https://advisories.gitlab.com/npm/polyfill-regenerator/MAL-2025-49030/
Malicious code in polyfill-regenerator (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49030 Malicious code in polyfill-regenerator (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codepolyfillregeneratornpmgitlab
https://advisories.gitlab.com/npm/@emilgroup/task-sdk/GMS-2026-42/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-42 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/lion-based-ui-labs/MAL-2025-49020/
Malicious code in lion-based-ui-labs (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49020 Malicious code in lion-based-ui-labs (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious code
https://advisories.gitlab.com/npm/inline-react-svg/MAL-2025-49011/
Malicious code in inline-react-svg (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49011 Malicious code in inline-react-svg (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codeinlinereact
https://advisories.gitlab.com/npm/@tnf-dev/mui/MAL-2025-47287/
Malicious code in @tnf-dev/mui (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47287 Malicious code in @tnf-dev/mui (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codetnfdev
https://advisories.gitlab.com/npm/ember-url-hash-polyfill/MAL-2025-47310/
Malicious code in ember-url-hash-polyfill (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47310 Malicious code in ember-url-hash-polyfill (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens...
malicious code
https://advisories.gitlab.com/npm/prefer-arrow/MAL-2025-49032/
Malicious code in prefer-arrow (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49032 Malicious code in prefer-arrow (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codepreferarrownpmgitlab
https://advisories.gitlab.com/npm/@nativescript-community/sentry/MAL-2025-47149/
Malicious code in @nativescript-community/sentry (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47149 Malicious code in @nativescript-community/sentry (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals...
malicious codenativescriptcommunity
https://advisories.gitlab.com/npm/flowtype-errors/MAL-2025-49006/
Malicious code in flowtype-errors (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49006 Malicious code in flowtype-errors (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codeerrorsnpmgitlabadvisory
https://advisories.gitlab.com/npm/@emilgroup/process-manager-sdk-node/GMS-2026-37/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-37 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/openclaw/CVE-2026-35641/
OpenClaw has an Arbitrary Malicious Code Execution Vulnerability | GitLab Advisory Database (GLAD)
CVE-2026-35641 OpenClaw has an Arbitrary Malicious Code Execution Vulnerability: During the installation phase of OpenClaw local plugins/hooks, the Git...
malicious code
https://me-en.kaspersky.com/resource-center/definitions/malicious-code
What is Malicious Code? | Malicious Code Definition
Jul 30, 2025 - Industry definition for the term Malicious Code. Malicious code is computer code that causes security breaches to damage a computing system. It's a type of...
what ismalicious codedefinition
https://advisories.gitlab.com/npm/xo-typescript/MAL-2025-39911/
Malicious code in xo-typescript (npm) | GitLab Advisory Database (GLAD)
MAL-2025-39911 Malicious code in xo-typescript (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codexotypescriptnpmgitlab
https://advisories.gitlab.com/npm/@teselagen/liquibase-tools/MAL-2025-47274/
Malicious code in @teselagen/liquibase-tools (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47274 Malicious code in @teselagen/liquibase-tools (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens...
malicious codeliquibase
https://advisories.gitlab.com/npm/dynamic-import-node/MAL-2025-49100/
Malicious code in dynamic-import-node (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49100 Malicious code in dynamic-import-node (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codedynamicimport
https://advisories.gitlab.com/npm/@emilgroup/customer-sdk/GMS-2026-16/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-16 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/mstate-react/MAL-2025-47331/
Malicious code in mstate-react (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47331 Malicious code in mstate-react (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codereactnpmgitlabadvisory
https://advisories.gitlab.com/npm/@ctrl/deluge/MAL-2025-47131/
Malicious code in @ctrl/deluge (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47131 Malicious code in @ctrl/deluge (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codectrldelugenpmgitlab
https://advisories.gitlab.com/npm/@crowdstrike/foundry-js/MAL-2025-47234/
Malicious code in @crowdstrike/foundry-js (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47234 Malicious code in @crowdstrike/foundry-js (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens...
malicious codecrowdstrikefoundry
https://advisories.gitlab.com/npm/airbnb-hooks/MAL-2025-14192/
Malicious code in airbnb-hooks (npm) | GitLab Advisory Database (GLAD)
MAL-2025-14192 Malicious code in airbnb-hooks (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codeairbnbhooksnpmgitlab
https://advisories.gitlab.com/npm/cimpress-atsquad/MAL-2025-17032/
Malicious code in cimpress-atsquad (npm) | GitLab Advisory Database (GLAD)
MAL-2025-17032 Malicious code in cimpress-atsquad (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codecimpressnpmgitlabadvisory
https://pastebin.com/bWjwehwr
Malicious code injected into WordPress sites - Pastebin.com
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
malicious codewordpress sitesinjectedpastebin
https://usa.kaspersky.com/resource-center/definitions/malicious-code
What is Malicious Code? | Definition
Jul 30, 2025 - Industry definition for the term Malicious Code. Malicious code is computer code that causes security breaches to damage a computing system. It's a type of...
what ismalicious codedefinition
https://advisories.gitlab.com/npm/@tnf-dev/api/MAL-2025-47284/
Malicious code in @tnf-dev/api (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47284 Malicious code in @tnf-dev/api (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codedev apitnf
https://advisories.gitlab.com/npm/@nativescript-community/ui-label/MAL-2025-47388/
Malicious code in @nativescript-community/ui-label (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47388 Malicious code in @nativescript-community/ui-label (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals...
malicious code
https://advisories.gitlab.com/npm/named-asset-import/MAL-2025-49024/
Malicious code in named-asset-import (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49024 Malicious code in named-asset-import (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codenamedasset
https://advisories.gitlab.com/npm/@emilgroup/payment-sdk-node/GMS-2026-35/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-35 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/adobe-alloy/MAL-2025-47576/
Malicious code in adobe-alloy (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47576 Malicious code in adobe-alloy (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codeadobealloynpmgitlab
https://advisories.gitlab.com/pypi/ctx/GMS-2022-1726/
Embedded Malicious Code in ctx | GitLab Advisory Database (GLAD)
GMS-2022-1726 Embedded Malicious Code in ctx: The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project...
malicious codeembeddedctxgitlabadvisory
https://advisories.gitlab.com/npm/eslint-config-googlejs-es6/MAL-2025-19830/
Malicious code in eslint-config-googlejs-es6 (npm) | GitLab Advisory Database (GLAD)
MAL-2025-19830 Malicious code in eslint-config-googlejs-es6 (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious...
malicious code
https://advisories.gitlab.com/npm/@emilgroup/billing-sdk-node/GMS-2026-10/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-10 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@emilgroup/partner-sdk-node/GMS-2026-33/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-33 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@nstudio/xplat/MAL-2025-47169/
Malicious code in @nstudio/xplat (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47169 Malicious code in @nstudio/xplat (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codenpmgitlabadvisorydatabase
https://advisories.gitlab.com/npm/sort-keys-fix/MAL-2025-49043/
Malicious code in sort-keys-fix (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49043 Malicious code in sort-keys-fix (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codesortkeys
https://advisories.gitlab.com/npm/faltest/MAL-2025-49002/
Malicious code in faltest (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49002 Malicious code in faltest (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals tokens...
malicious codenpmgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@qqbrowser/openclaw-qbot/GMS-2026-67/
Embedded Malicious Code with vendored remote access trojan | GitLab Advisory Database (GLAD)
GMS-2026-67 Embedded Malicious Code with vendored remote access trojan: Version 0.0.130 of the npm package @qqbrowser/openclaw-qbot contains vendored malicious...
remote access trojanmalicious code
https://advisories.gitlab.com/npm/google-payment/MAL-2025-1826/
Malicious code in google-payment (npm) | GitLab Advisory Database (GLAD)
MAL-2025-1826 Malicious code in google-payment (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals...
malicious codegoogle paymentnpmgitlabadvisory
https://advisories.gitlab.com/npm/xo-form-components/MAL-2025-49067/
Malicious code in xo-form-components (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49067 Malicious code in xo-form-components (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codeform componentsxo
https://advisories.gitlab.com/npm/@emilgroup/public-api-sdk/GMS-2026-38/
Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD)
GMS-2026-38 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from...
malicious codeembeddedgitlabadvisorydatabase
https://advisories.gitlab.com/npm/@teselagen/react-table/MAL-2025-47278/
Malicious code in @teselagen/react-table (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47278 Malicious code in @teselagen/react-table (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codereact table
https://advisories.gitlab.com/npm/react-important-stuff/MAL-2025-49036/
Malicious code in react-important-stuff (npm) | GitLab Advisory Database (GLAD)
MAL-2025-49036 Malicious code in react-important-stuff (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload...
malicious codeimportant stuffreact
https://advisories.gitlab.com/npm/@tnf-dev/react/MAL-2025-47288/
Malicious code in @tnf-dev/react (npm) | GitLab Advisory Database (GLAD)
MAL-2025-47288 Malicious code in @tnf-dev/react (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and...
malicious codetnfdev