MAL-2022-248 Malicious code in @epc-libraries/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 513bf18f392186904a1d77dd47476bde881e1a8f377dc070998c5d1625e72b7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-247 Malicious code in @epc-libraries/kinesis-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2395684a2ae7565ee6ee411ffbdf038c8b48b3c3a2ffe473e90087627b114bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-237 Malicious code in @epc-infra/aurora-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90cf861bd2521b2e50dc30a7c5164cfd3c53a724597ffc85a923d730662346b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-245 Malicious code in @epc-libraries/data-api-versions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82fc77aff4c8f44ec626ff023762b926e5407f3b269db521d9006777e956242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-244 Malicious code in @epc-libraries/cdk-custom-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28aceef06911da19dfe5a1f64caabdef91e74dc144e17e81f52bd1894737a018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-240 Malicious code in @epc-infra/dynamo-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d45f7863b32e8818b117c91b3f213e270acfa8104a223f2ad0ede0cfadf83e53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-238 Malicious code in @epc-infra/clinstestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9960278b8fe842784b23bfe1b25691881cd6b765f159735025d6709ad0ef8dd4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-243 Malicious code in @epc-infra/users-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf73169208787ddafa275f2837c6596a96541a2c4b1526a4cdd468678bfa4e47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2020 Malicious code in colors-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d5af6f497e0202edee961786dc6b4e44031f670e8aa5748f10467dc2b286de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3502 Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3279 Malicious code in gatsby-plugin-added-by-parent-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05e4eb992ae64e44e0964e3a0b46fbb4d1d22f0de7827450321de3eeabbb002b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-998 Malicious code in angieslist-gulp-build-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91073d8aec7654e92fde4a5136f0cb4bd9ec77e2175cae875ab44d249d299818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4945 Malicious code in npm_test_nothing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2762093ac3ccb836bc8b7b5f620322cb4637be2e69a6c8128a2b3ba477ef46b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6722 Malicious code in ual-content-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0e062a5264ae40c85a311a097fdae78c7ea205dd058a5f59f25859075c6c121 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2103 Malicious code in com.unity.searcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14aeba676170a1376e65d8f33d8dea365e9c1d773f411624d9aec9f2d3a21ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5239 Malicious code in payoneer-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3214dbcec3171e906276f2f56836328b487566481b00c467fff3e60a4be19ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Embedded malware in rc

The npm package rc had versions published with malicious code. Users of affected versions 1.2.9, 1.3.9, and 2.3.9 should downgrade to 1.2.8 as soon as possible and check their systems for suspicious activity. Any computer that has this package installed or running should be considered fully...

GHSA-73QR-PFMQ-6RP8 Embedded malware in coa

The npm package coa had versions published with malicious code. Users of affected versions 2.0.3 and above should downgrade to 2.0.2 as soon as possible and check their systems for suspicious activity. See this issue for details as they unfold. Any computer that has this package installed or...

Embedded malware in coa

The npm package coa had versions published with malicious code. Users of affected versions 2.0.3 and above should downgrade to 2.0.2 as soon as possible and check their systems for suspicious activity. See this issue for details as they unfold. Any computer that has this package installed or...

Popular NPM Package Hijacked to Publish Crypto-mining Malware

The U.S. Cybersecurity and Infrastructure Security Agency on Friday warned of crypto-mining and password-stealing malware embedded in "UAParser.js," a popular JavaScript NPM library with over 6 million weekly downloads, days after the NPM repository moved to get rid of three rogue packages that...