Malicious code in create-shopify-web-app (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 060088163bdd31721ea28bf31315bd2e50c4dd13215f62116756f66a3b69af83 Any computer that has this package install...

Malicious code in unisocks (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7048c72cc0d604b91309e2009ab3661aa15f1f3199079d12871d1a54a2041b6b Any computer that has this package install...

Malicious code in spid-csvautofilljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a58cfebfacf0be1701b2d356aa0e74d6a7c0fa67c9340191ce5ca79a8a50894 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scalavex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c3e20b9de8d5df626f2290f08c5a19243ce682e61ef5b05fc6796febf73e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rafarafa_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fef5839fff290714b9670f7234be53a1ba5805118f3ff573e3e7340496a8c133 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in private-bug-bounty-secret (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a55444761df525e7428c98e6dd9a390a1cf5cfea4a7485f768da73a2067df6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecpfs-react-build-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4aa038b17c743c2c728e2687e0f828cbd3b0a8934efb7637a1bdc9879882abf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecpfs-react-data-driven-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8380a709c782f2024d272f1ff935fda6cc8d7258a5c46da5d6e86997cc1ccee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xrp_set_dest_tag (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8c9b7e60ff94bd3d484c6d240fc5c7a79605e80eed354011da5b94c7263b74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in client-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b9f11a230f7ff6aa85aa65ed5160eb5e4ebf5dea53582c1feb521964a5472a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in container-toolkit-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 495f1eeee43fdcdf2a5b5468befc8209a0d5d55f315464d80a9ae3d926a34da7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orderly.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d606d970811240b8c005b7dc9ac5ee50ff9d2d77e9a14a34703c115392b1a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-json-scaller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2e93039c536b5db12cf0b1f4621ba91cd14d192c466cfdfe2a65fd357fd1e83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plugin-proposal-json-strings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c11469c014eaf5720410613f78c79dd6cd0aa28aca6fd52a0152441fb13b242e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vareapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 296640ad50ffc63152ca94b0951a56c7ebc71e341ecae13dab648ae97fa99425 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in safeness-sb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d558c870d1afa6f183ac52e8fe21ea328ac4e688f64dd389d3a1b4e98f0a93f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in smtp2go (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ee3777f995fe5a08e581e345e2f1b39a3c0a271203e9f97f6105bc1dafc3053 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ruby-lsp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23d59cae1de4c2853d318ad10197c82dc6f10fe194854b704b477cc20b271184 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-ui-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30657b12f3aa80c9d47f78b2b86279c2077fb4840616cd1de07f80086d4d7d66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-formatter-richhtml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c1882bf6a70efa173960185fd119365caef76186573c332b079148bd0e752f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...