Index

sso-users-detection 99.9.1 Sep 6 javascript

27dc077710b00c61d14b7e46946de3b1fd114b2fa055feac143528da33b04b13 ✓ O(S₄)Md(Pa₆)

100% Malicious dependency URL

requestor-util 99.9.1 Sep 4 javascript

2cdf9b06e77a003bf9a186464d614bef7a08d38c6f4313969f9577653264447f ✓ O(S₄)Md(Pa₆)

100% preinstall exfiltrates host identity via OOB

portway 99.9.1 Sep 4 javascript

58b335a0fb8d5b9762a3d5399c6137b07bebefefc894aee2db88cc6d4a950e15 ✓ O(S₄)Md(Pa₆)

100% Dependency confusion attack package

frontend-regulations 99.9.1 Sep 4 javascript

2511279d48a896b3b28f09885b9780dc21bb658eb0336d162f65c9f00ed6234b ✓ O(S₄)Md(Pa₆)

100% preinstall exfiltrates host data via OOB

oem-agentic-shared 99.9.1 Sep 4 javascript

d0a3b418ddb464b2e610f5d8d4057b759d096b89c7555a2327e8a1b0828d6a33 ✓ O(S₄)Md(Pa₆)

impersonation/depconfmanifest/placeholder

notifications-broadcast 99.9.1 Sep 4 javascript

029a125360d60e34cbcf4cacb8b136ccd53ecaf65db2886616121e744ce06909 ✓ O(S₄)Md(Pa₆)

100% Dependency-confusion package exfiltrating host data via Oastify DNS

polylabel-web-lib 99.9.1 Sep 4 javascript

6875a347d196fc55add0b76494eb32f7c1cfa50e588cda6f13261b49acd5b558 ✓ O(S₄)Md(Pa₆)

100% preinstall exfiltrates host data to OOB

motiondnb 99.9.1 Sep 4 javascript

ea10f6e6909aed8c87f9aa32f238b341d7fc0f2f8d4d23cd47a91fea781e023b ✓ O(S₄)Md(Pa₆)

100% preinstall exfiltrates host data via DNS

metrics-ui 99.9.1 Sep 4 javascript

3a930dfe5b6ecfbe18b96eb61cc2ffbf16a5b9dfd84aaa03c36515486860cb64 ✓ O(S₄)Md(Pa₆)

100% Malicious dependency URL

cxpw-offers 99.9.1 Sep 4 javascript

e2d3d8b510c95b808a94a11fd6652fb694012698aaf844100c788d74968db59a ✓ O(S₄)Md(Pa₆)

100% Malicious dependency URL

consumerweb-calurls 99.9.1 Sep 4 javascript

e895699f15a0db8972505a07f6e1ad0fc02a27279eb9590533378fa66fe9bf6c ✓ O(S₄)Md(Pa₆)

100% Exfiltrates host data via Oastify

commonweb-rewards 99.9.1 Sep 4 javascript

2cded25d94a03b828488da221c43c5f9b401bacc0245dec33375a846ff47326e ✓ O(S₄)Md(Pa₆)

100% preinstall exfiltrates host data via OOB

commonweb-card 99.9.1 Sep 4 javascript

641b30ef7809087bf1d46f0c0819bdc4a582f73a2ad07744b764ea2bd81bbcdb ✓ O(S₄)Md(Pa₆)

100% preinstall exfiltrates host data via OOB

commonweb-wallet 99.9.1 Sep 4 javascript

0383b5293acfdc17c43cc8b43503644d856e4cc285d13ad09992aab648590c65 ✓ O(S₄)Md(Pa₆)

100% OOB exfiltration via preinstall hook

commonweb-moneymovement 99.9.1 Sep 4 javascript

a47825aa8f99effb2b61a8990708da3326339ad8844f398aac634f10f3b6e32b ✓ O(S₄)Md(Pa₆)

100% Preinstall exfiltrates host identity

connect-contingency 99.9.1 Sep 4 javascript

1ffb843bf46695059fe64c68b7c8afeabcb4e9454f0b8677db731895bff0ba34 ✓ O(S₄)Md(Pa₆)

manifest/placeholderpackage/direct-url

react-native-haptic-timeline 1.0.1 May 28 javascript

0669782afa33dfe81cf23e86b693914de35cc60c16b452ff7262fdb83114ec37 O(S₄)Md(Pa₆)

package.json May 8 windows

2130058c94d4d1f41312e54994c1f5adea73e7d85f14282516ecfd65b8bdd857 O(S₄)Md(Pa₆)