Robuta

https://advisories.gitlab.com/npm/@emilgroup/commission-sdk/GMS-2026-14/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-14 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/@thangved/callback-window/MAL-2025-47281/ Malicious code in @thangved/callback-window (npm) | GitLab Advisory Database (GLAD) MAL-2025-47281 Malicious code in @thangved/callback-window (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens... malicious codecallback https://advisories.gitlab.com/npm/xo-styles/MAL-2025-49071/ Malicious code in xo-styles (npm) | GitLab Advisory Database (GLAD) MAL-2025-49071 Malicious code in xo-styles (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codexostylesnpmgitlab https://advisories.gitlab.com/npm/airbnb-base-typescript-prettier/MAL-2025-48977/ Malicious code in airbnb-base-typescript-prettier (npm) | GitLab Advisory Database (GLAD) MAL-2025-48977 Malicious code in airbnb-base-typescript-prettier (npm): This malicious package was published during the PhantomRaven NPM campaign. The... malicious code https://advisories.gitlab.com/npm/@operato/utils/MAL-2025-47263/ Malicious code in @operato/utils (npm) | GitLab Advisory Database (GLAD) MAL-2025-47263 Malicious code in @operato/utils (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codeutilsnpmgitlabadvisory https://advisories.gitlab.com/npm/sort-keys-plus/MAL-2025-49044/ Malicious code in sort-keys-plus (npm) | GitLab Advisory Database (GLAD) MAL-2025-49044 Malicious code in sort-keys-plus (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codesortkeys https://advisories.gitlab.com/npm/angulartics2/MAL-2025-47172/ Malicious code in angulartics2 (npm) | GitLab Advisory Database (GLAD) MAL-2025-47172 Malicious code in angulartics2 (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codenpmgitlabadvisorydatabase https://advisories.gitlab.com/npm/@teselagen/ui/MAL-2025-47280/ Malicious code in @teselagen/ui (npm) | GitLab Advisory Database (GLAD) MAL-2025-47280 Malicious code in @teselagen/ui (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codeuinpmgitlabadvisory https://advisories.gitlab.com/npm/closure-es6/MAL-2025-17150/ Malicious code in closure-es6 (npm) | GitLab Advisory Database (GLAD) MAL-2025-17150 Malicious code in closure-es6 (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codeclosurenpmgitlabadvisory https://advisories.gitlab.com/npm/@pypestream/floating-ui-dom/GMS-2026-54/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-54 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/mcp-knowledge-graph/MAL-2025-47327/ Malicious code in mcp-knowledge-graph (npm) | GitLab Advisory Database (GLAD) MAL-2025-47327 Malicious code in mcp-knowledge-graph (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codeknowledge graphmcp https://advisories.gitlab.com/npm/create-hest-app/MAL-2025-47303/ Malicious code in create-hest-app (npm) | GitLab Advisory Database (GLAD) MAL-2025-47303 Malicious code in create-hest-app (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codecreatehest https://advisories.gitlab.com/npm/durablefunctionsmonitor-vscodeext/MAL-2025-48993/ Malicious code in durablefunctionsmonitor-vscodeext (npm) | GitLab Advisory Database (GLAD) MAL-2025-48993 Malicious code in durablefunctionsmonitor-vscodeext (npm): This malicious package was published during the PhantomRaven NPM campaign. The... malicious codenpmgitlabadvisorydatabase https://advisories.gitlab.com/npm/xo-shipping-change/MAL-2025-49069/ Malicious code in xo-shipping-change (npm) | GitLab Advisory Database (GLAD) MAL-2025-49069 Malicious code in xo-shipping-change (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codexoshipping https://advisories.gitlab.com/npm/@crowdstrike/commitlint/MAL-2025-47233/ Malicious code in @crowdstrike/commitlint (npm) | GitLab Advisory Database (GLAD) MAL-2025-47233 Malicious code in @crowdstrike/commitlint (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens... malicious codecrowdstrikecommitlintnpmgitlab https://advisories.gitlab.com/npm/syntax-dynamic-import/MAL-2025-49046/ Malicious code in syntax-dynamic-import (npm) | GitLab Advisory Database (GLAD) MAL-2025-49046 Malicious code in syntax-dynamic-import (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codesyntaxdynamic https://advisories.gitlab.com/npm/important-stuff/MAL-2025-49009/ Malicious code in important-stuff (npm) | GitLab Advisory Database (GLAD) MAL-2025-49009 Malicious code in important-stuff (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codeimportant stuffnpmgitlabadvisory https://advisories.gitlab.com/npm/globalize-rpk/MAL-2025-47315/ Malicious code in globalize-rpk (npm) | GitLab Advisory Database (GLAD) MAL-2025-47315 Malicious code in globalize-rpk (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codeglobalizerpknpmgitlab https://advisories.gitlab.com/npm/ts-imports/MAL-2025-47355/ Malicious code in ts-imports (npm) | GitLab Advisory Database (GLAD) MAL-2025-47355 Malicious code in ts-imports (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials... malicious codetsnpmgitlabadvisory https://advisories.gitlab.com/npm/capacitor-notificationhandler/MAL-2025-47394/ Malicious code in capacitor-notificationhandler (npm) | GitLab Advisory Database (GLAD) MAL-2025-47394 Malicious code in capacitor-notificationhandler (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals... malicious codecapacitornpmgitlabadvisory https://advisories.gitlab.com/npm/@emilgroup/task-sdk-node/GMS-2026-43/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-43 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/@nativescript-community/ui-material-bottomsheet/MAL-2025-47156/ Malicious code in @nativescript-community/ui-material-bottomsheet (npm) | GitLab Advisory Database... MAL-2025-47156 Malicious code in @nativescript-community/ui-material-bottomsheet (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious... malicious code https://advisories.gitlab.com/npm/db-evo/MAL-2025-47400/ Malicious code in db-evo (npm) | GitLab Advisory Database (GLAD) MAL-2025-47400 Malicious code in db-evo (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials and... malicious codedbevonpmgitlab https://advisories.gitlab.com/npm/discord-open-source/MAL-2025-47583/ Malicious code in discord-open-source (npm) | GitLab Advisory Database (GLAD) MAL-2025-47583 Malicious code in discord-open-source (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codeopen sourcediscord https://advisories.gitlab.com/npm/xo-validation/MAL-2025-49076/ Malicious code in xo-validation (npm) | GitLab Advisory Database (GLAD) MAL-2025-49076 Malicious code in xo-validation (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codexovalidationnpmgitlab https://surface.syr.edu/eecs_etd/64/ "Surviving malicious code attacks" by Haizhi Xu The goal of the research presented in this dissertation is to prevent, detect, and mitigate malicious code attacks that modify the legitimate program control... malicious codesurvivingattacksxu https://advisories.gitlab.com/npm/@art-ws/di/MAL-2025-47375/ Malicious code in @art-ws/di (npm) | GitLab Advisory Database (GLAD) MAL-2025-47375 Malicious code in @art-ws/di (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials... malicious codein artws https://advisories.gitlab.com/npm/oradm-to-sqlz/MAL-2025-47337/ Malicious code in oradm-to-sqlz (npm) | GitLab Advisory Database (GLAD) MAL-2025-47337 Malicious code in oradm-to-sqlz (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious code https://advisories.gitlab.com/npm/@things-factory/auth-base/MAL-2025-47283/ Malicious code in @things-factory/auth-base (npm) | GitLab Advisory Database (GLAD) MAL-2025-47283 Malicious code in @things-factory/auth-base (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens... malicious code https://advisories.gitlab.com/npm/@teselagen/range-utils/MAL-2025-47276/ Malicious code in @teselagen/range-utils (npm) | GitLab Advisory Database (GLAD) MAL-2025-47276 Malicious code in @teselagen/range-utils (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious coderange https://advisories.gitlab.com/npm/@ctrl/torrent-file/MAL-2025-47142/ Malicious code in @ctrl/torrent-file (npm) | GitLab Advisory Database (GLAD) MAL-2025-47142 Malicious code in @ctrl/torrent-file (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codetorrent filectrl https://advisories.gitlab.com/npm/koa2-swagger-ui/MAL-2025-47187/ Malicious code in koa2-swagger-ui (npm) | GitLab Advisory Database (GLAD) MAL-2025-47187 Malicious code in koa2-swagger-ui (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codeswagger ui https://advisories.gitlab.com/npm/badgekit-api-client/MAL-2025-48774/ Malicious code in badgekit-api-client (npm) | GitLab Advisory Database (GLAD) MAL-2025-48774 Malicious code in badgekit-api-client (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codeapi client https://advisories.gitlab.com/npm/filename-rules/MAL-2025-49003/ Malicious code in filename-rules (npm) | GitLab Advisory Database (GLAD) MAL-2025-49003 Malicious code in filename-rules (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codefilenamerulesnpmgitlab https://advisories.gitlab.com/npm/jsx-a11y/MAL-2025-49016/ Malicious code in jsx-a11y (npm) | GitLab Advisory Database (GLAD) MAL-2025-49016 Malicious code in jsx-a11y (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals tokens... malicious codejsxnpmgitlabadvisory https://advisories.gitlab.com/npm/skyscanner-with-prettier/MAL-2025-49041/ Malicious code in skyscanner-with-prettier (npm) | GitLab Advisory Database (GLAD) MAL-2025-49041 Malicious code in skyscanner-with-prettier (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious... malicious codeskyscanner https://advisories.gitlab.com/npm/vuejs-accessibility/MAL-2025-49064/ Malicious code in vuejs-accessibility (npm) | GitLab Advisory Database (GLAD) MAL-2025-49064 Malicious code in vuejs-accessibility (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codevuejsaccessibilitynpmgitlab https://advisories.gitlab.com/npm/chromestatus-openapi/MAL-2024-7783/ Malicious code in chromestatus-openapi (npm) | GitLab Advisory Database (GLAD) MAL-2024-7783 Malicious code in chromestatus-openapi (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codeopenapinpmgitlabadvisory https://advisories.gitlab.com/npm/mobioffice-cli/MAL-2025-47404/ Malicious code in mobioffice-cli (npm) | GitLab Advisory Database (GLAD) MAL-2025-47404 Malicious code in mobioffice-cli (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codemobiofficeclinpmgitlab https://advisories.gitlab.com/npm/eslint-disable-next-line/MAL-2025-48996/ Malicious code in eslint-disable-next-line (npm) | GitLab Advisory Database (GLAD) MAL-2025-48996 Malicious code in eslint-disable-next-line (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious... malicious codenext line https://advisories.gitlab.com/npm/dynamic-import-webpack/MAL-2025-19031/ Malicious code in dynamic-import-webpack (npm) | GitLab Advisory Database (GLAD) MAL-2025-19031 Malicious code in dynamic-import-webpack (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codedynamicimport https://advisories.gitlab.com/npm/xo-login-components/MAL-2025-49068/ Malicious code in xo-login-components (npm) | GitLab Advisory Database (GLAD) MAL-2025-49068 Malicious code in xo-login-components (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codexo https://advisories.gitlab.com/npm/@hestjs/validation/MAL-2025-47245/ Malicious code in @hestjs/validation (npm) | GitLab Advisory Database (GLAD) MAL-2025-47245 Malicious code in @hestjs/validation (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codevalidationnpmgitlabadvisory https://advisories.gitlab.com/npm/airbnb-lite/MAL-2025-14193/ Malicious code in airbnb-lite (npm) | GitLab Advisory Database (GLAD) MAL-2025-14193 Malicious code in airbnb-lite (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codeairbnblitenpmgitlab https://advisories.gitlab.com/npm/mycli123/MAL-2025-42032/ Malicious code in mycli123 (npm) | GitLab Advisory Database (GLAD) MAL-2025-42032 Malicious code in mycli123 (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals tokens... malicious codenpmgitlabadvisorydatabase https://advisories.gitlab.com/npm/yoo-styles/MAL-2025-47230/ Malicious code in yoo-styles (npm) | GitLab Advisory Database (GLAD) MAL-2025-47230 Malicious code in yoo-styles (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials... malicious codeyoostylesnpmgitlab https://advisories.gitlab.com/npm/pm2-gelf-json/MAL-2025-47339/ Malicious code in pm2-gelf-json (npm) | GitLab Advisory Database (GLAD) MAL-2025-47339 Malicious code in pm2-gelf-json (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codegelf https://advisories.gitlab.com/npm/@emilgroup/insurance-sdk/GMS-2026-26/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-26 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/@emilgroup/discount-sdk-node/GMS-2026-19/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-19 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://cwe.mitre.org/data/definitions/506.html CWE - CWE-506: Embedded Malicious Code (4.20) Common Weakness Enumeration (CWE) is a list of software weaknesses. malicious codecweembedded https://advisories.gitlab.com/npm/voip-callkit/MAL-2025-47416/ Malicious code in voip-callkit (npm) | GitLab Advisory Database (GLAD) MAL-2025-47416 Malicious code in voip-callkit (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codevoipnpmgitlabadvisory https://advisories.gitlab.com/npm/@yoobic/yobi/MAL-2025-47292/ Malicious code in @yoobic/yobi (npm) | GitLab Advisory Database (GLAD) MAL-2025-47292 Malicious code in @yoobic/yobi (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codeyoobicyobinpmgitlab https://advisories.gitlab.com/npm/oclif-typescript/MAL-2025-42050/ Malicious code in oclif-typescript (npm) | GitLab Advisory Database (GLAD) MAL-2025-42050 Malicious code in oclif-typescript (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codeocliftypescriptnpmgitlab https://advisories.gitlab.com/npm/@emilgroup/document-sdk/GMS-2026-20/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-20 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/@ctrl/qbittorrent/MAL-2025-47138/ Malicious code in @ctrl/qbittorrent (npm) | GitLab Advisory Database (GLAD) MAL-2025-47138 Malicious code in @ctrl/qbittorrent (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codectrlqbittorrentnpmgitlab https://advisories.gitlab.com/npm/wdio-web-reporter/MAL-2025-47361/ Malicious code in wdio-web-reporter (npm) | GitLab Advisory Database (GLAD) MAL-2025-47361 Malicious code in wdio-web-reporter (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codeweb reporter https://advisories.gitlab.com/npm/airpilot/MAL-2025-47295/ Malicious code in airpilot (npm) | GitLab Advisory Database (GLAD) MAL-2025-47295 Malicious code in airpilot (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and credentials... malicious codeairpilotnpmgitlabadvisory https://advisories.gitlab.com/npm/ng-imports-checker/MAL-2025-47423/ Malicious code in ng-imports-checker (npm) | GitLab Advisory Database (GLAD) MAL-2025-47423 Malicious code in ng-imports-checker (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codengimports https://advisories.gitlab.com/npm/polyfill-regenerator/MAL-2025-49030/ Malicious code in polyfill-regenerator (npm) | GitLab Advisory Database (GLAD) MAL-2025-49030 Malicious code in polyfill-regenerator (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codepolyfillregeneratornpmgitlab https://advisories.gitlab.com/npm/@emilgroup/task-sdk/GMS-2026-42/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-42 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/lion-based-ui-labs/MAL-2025-49020/ Malicious code in lion-based-ui-labs (npm) | GitLab Advisory Database (GLAD) MAL-2025-49020 Malicious code in lion-based-ui-labs (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious code https://advisories.gitlab.com/npm/inline-react-svg/MAL-2025-49011/ Malicious code in inline-react-svg (npm) | GitLab Advisory Database (GLAD) MAL-2025-49011 Malicious code in inline-react-svg (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codeinlinereact https://advisories.gitlab.com/npm/@tnf-dev/mui/MAL-2025-47287/ Malicious code in @tnf-dev/mui (npm) | GitLab Advisory Database (GLAD) MAL-2025-47287 Malicious code in @tnf-dev/mui (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codetnfdev https://advisories.gitlab.com/npm/ember-url-hash-polyfill/MAL-2025-47310/ Malicious code in ember-url-hash-polyfill (npm) | GitLab Advisory Database (GLAD) MAL-2025-47310 Malicious code in ember-url-hash-polyfill (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens... malicious code https://advisories.gitlab.com/npm/prefer-arrow/MAL-2025-49032/ Malicious code in prefer-arrow (npm) | GitLab Advisory Database (GLAD) MAL-2025-49032 Malicious code in prefer-arrow (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codepreferarrownpmgitlab https://advisories.gitlab.com/npm/@nativescript-community/sentry/MAL-2025-47149/ Malicious code in @nativescript-community/sentry (npm) | GitLab Advisory Database (GLAD) MAL-2025-47149 Malicious code in @nativescript-community/sentry (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals... malicious codenativescriptcommunity https://advisories.gitlab.com/npm/flowtype-errors/MAL-2025-49006/ Malicious code in flowtype-errors (npm) | GitLab Advisory Database (GLAD) MAL-2025-49006 Malicious code in flowtype-errors (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codeerrorsnpmgitlabadvisory https://advisories.gitlab.com/npm/@emilgroup/process-manager-sdk-node/GMS-2026-37/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-37 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/openclaw/CVE-2026-35641/ OpenClaw has an Arbitrary Malicious Code Execution Vulnerability | GitLab Advisory Database (GLAD) CVE-2026-35641 OpenClaw has an Arbitrary Malicious Code Execution Vulnerability: During the installation phase of OpenClaw local plugins/hooks, the Git... malicious code https://me-en.kaspersky.com/resource-center/definitions/malicious-code What is Malicious Code? | Malicious Code Definition Jul 30, 2025 - Industry definition for the term Malicious Code. Malicious code is computer code that causes security breaches to damage a computing system. It's a type of... what ismalicious codedefinition https://advisories.gitlab.com/npm/xo-typescript/MAL-2025-39911/ Malicious code in xo-typescript (npm) | GitLab Advisory Database (GLAD) MAL-2025-39911 Malicious code in xo-typescript (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codexotypescriptnpmgitlab https://advisories.gitlab.com/npm/@teselagen/liquibase-tools/MAL-2025-47274/ Malicious code in @teselagen/liquibase-tools (npm) | GitLab Advisory Database (GLAD) MAL-2025-47274 Malicious code in @teselagen/liquibase-tools (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens... malicious codeliquibase https://advisories.gitlab.com/npm/dynamic-import-node/MAL-2025-49100/ Malicious code in dynamic-import-node (npm) | GitLab Advisory Database (GLAD) MAL-2025-49100 Malicious code in dynamic-import-node (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codedynamicimport https://advisories.gitlab.com/npm/@emilgroup/customer-sdk/GMS-2026-16/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-16 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/mstate-react/MAL-2025-47331/ Malicious code in mstate-react (npm) | GitLab Advisory Database (GLAD) MAL-2025-47331 Malicious code in mstate-react (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codereactnpmgitlabadvisory https://advisories.gitlab.com/npm/@ctrl/deluge/MAL-2025-47131/ Malicious code in @ctrl/deluge (npm) | GitLab Advisory Database (GLAD) MAL-2025-47131 Malicious code in @ctrl/deluge (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codectrldelugenpmgitlab https://advisories.gitlab.com/npm/@crowdstrike/foundry-js/MAL-2025-47234/ Malicious code in @crowdstrike/foundry-js (npm) | GitLab Advisory Database (GLAD) MAL-2025-47234 Malicious code in @crowdstrike/foundry-js (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens... malicious codecrowdstrikefoundry https://advisories.gitlab.com/npm/airbnb-hooks/MAL-2025-14192/ Malicious code in airbnb-hooks (npm) | GitLab Advisory Database (GLAD) MAL-2025-14192 Malicious code in airbnb-hooks (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codeairbnbhooksnpmgitlab https://advisories.gitlab.com/npm/cimpress-atsquad/MAL-2025-17032/ Malicious code in cimpress-atsquad (npm) | GitLab Advisory Database (GLAD) MAL-2025-17032 Malicious code in cimpress-atsquad (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codecimpressnpmgitlabadvisory https://pastebin.com/bWjwehwr Malicious code injected into WordPress sites - Pastebin.com Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time. malicious codewordpress sitesinjectedpastebin https://usa.kaspersky.com/resource-center/definitions/malicious-code What is Malicious Code? | Definition Jul 30, 2025 - Industry definition for the term Malicious Code. Malicious code is computer code that causes security breaches to damage a computing system. It's a type of... what ismalicious codedefinition https://advisories.gitlab.com/npm/@tnf-dev/api/MAL-2025-47284/ Malicious code in @tnf-dev/api (npm) | GitLab Advisory Database (GLAD) MAL-2025-47284 Malicious code in @tnf-dev/api (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codedev apitnf https://advisories.gitlab.com/npm/@nativescript-community/ui-label/MAL-2025-47388/ Malicious code in @nativescript-community/ui-label (npm) | GitLab Advisory Database (GLAD) MAL-2025-47388 Malicious code in @nativescript-community/ui-label (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals... malicious code https://advisories.gitlab.com/npm/named-asset-import/MAL-2025-49024/ Malicious code in named-asset-import (npm) | GitLab Advisory Database (GLAD) MAL-2025-49024 Malicious code in named-asset-import (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codenamedasset https://advisories.gitlab.com/npm/@emilgroup/payment-sdk-node/GMS-2026-35/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-35 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/adobe-alloy/MAL-2025-47576/ Malicious code in adobe-alloy (npm) | GitLab Advisory Database (GLAD) MAL-2025-47576 Malicious code in adobe-alloy (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codeadobealloynpmgitlab https://advisories.gitlab.com/pypi/ctx/GMS-2022-1726/ Embedded Malicious Code in ctx | GitLab Advisory Database (GLAD) GMS-2022-1726 Embedded Malicious Code in ctx: The ctx hosted project on PyPI was taken over via user account compromise and replaced with a malicious project... malicious codeembeddedctxgitlabadvisory https://advisories.gitlab.com/npm/eslint-config-googlejs-es6/MAL-2025-19830/ Malicious code in eslint-config-googlejs-es6 (npm) | GitLab Advisory Database (GLAD) MAL-2025-19830 Malicious code in eslint-config-googlejs-es6 (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious... malicious code https://advisories.gitlab.com/npm/@emilgroup/billing-sdk-node/GMS-2026-10/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-10 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/@emilgroup/partner-sdk-node/GMS-2026-33/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-33 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/@nstudio/xplat/MAL-2025-47169/ Malicious code in @nstudio/xplat (npm) | GitLab Advisory Database (GLAD) MAL-2025-47169 Malicious code in @nstudio/xplat (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codenpmgitlabadvisorydatabase https://advisories.gitlab.com/npm/sort-keys-fix/MAL-2025-49043/ Malicious code in sort-keys-fix (npm) | GitLab Advisory Database (GLAD) MAL-2025-49043 Malicious code in sort-keys-fix (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codesortkeys https://advisories.gitlab.com/npm/faltest/MAL-2025-49002/ Malicious code in faltest (npm) | GitLab Advisory Database (GLAD) MAL-2025-49002 Malicious code in faltest (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals tokens... malicious codenpmgitlabadvisorydatabase https://advisories.gitlab.com/npm/@qqbrowser/openclaw-qbot/GMS-2026-67/ Embedded Malicious Code with vendored remote access trojan | GitLab Advisory Database (GLAD) GMS-2026-67 Embedded Malicious Code with vendored remote access trojan: Version 0.0.130 of the npm package @qqbrowser/openclaw-qbot contains vendored malicious... remote access trojanmalicious code https://advisories.gitlab.com/npm/google-payment/MAL-2025-1826/ Malicious code in google-payment (npm) | GitLab Advisory Database (GLAD) MAL-2025-1826 Malicious code in google-payment (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload steals... malicious codegoogle paymentnpmgitlabadvisory https://advisories.gitlab.com/npm/xo-form-components/MAL-2025-49067/ Malicious code in xo-form-components (npm) | GitLab Advisory Database (GLAD) MAL-2025-49067 Malicious code in xo-form-components (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codeform componentsxo https://advisories.gitlab.com/npm/@emilgroup/public-api-sdk/GMS-2026-38/ Embedded Malicious Code (CanisterWorm) | GitLab Advisory Database (GLAD) GMS-2026-38 Embedded Malicious Code (CanisterWorm): This package version was compromised as part of the CanisterWorm supply chain attack, which originated from... malicious codeembeddedgitlabadvisorydatabase https://advisories.gitlab.com/npm/@teselagen/react-table/MAL-2025-47278/ Malicious code in @teselagen/react-table (npm) | GitLab Advisory Database (GLAD) MAL-2025-47278 Malicious code in @teselagen/react-table (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codereact table https://advisories.gitlab.com/npm/react-important-stuff/MAL-2025-49036/ Malicious code in react-important-stuff (npm) | GitLab Advisory Database (GLAD) MAL-2025-49036 Malicious code in react-important-stuff (npm): This malicious package was published during the PhantomRaven NPM campaign. The malicious payload... malicious codeimportant stuffreact https://advisories.gitlab.com/npm/@tnf-dev/react/MAL-2025-47288/ Malicious code in @tnf-dev/react (npm) | GitLab Advisory Database (GLAD) MAL-2025-47288 Malicious code in @tnf-dev/react (npm): This package was compromised by the Shai-Hulud NPM worm. The malicious payload steals tokens and... malicious codetnfdev