MAL-2024-411 Malicious code in wlwz-2312-2607 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12bca9a61ba8e65c2d9858a76be43611bedf5be8d6d01b48d67cd604a23c2dbc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-7606 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ddcb3cde7ed0b7860ba0f04e992ccc4cc565ea714af45e8e1fb9f616e1a098 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-0704 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dff08a90b2890719bd58361a4db08282f655e773f8b9a9a31f7a602c09749f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-154 Malicious code in apiv1-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b1e309b954dae134d52912053afde20e6d50386a7ee7487c082c8f0a026d3ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b0f69a9a955c3d91a271b9915114fbf4c8fa069f6358c794b9a27ab30c2df84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalk-color-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f6bb2420bb3dd90627f3e58d133384bba145d7e9d866765cafc6c126aca6485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coloma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 442efbed4980298b8836f4c6f1aafbd8df2bd865f66c88bcc5a46226d0112bbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get_name_of_token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6b5dfc1df3f6f7257bc6a0ffb95fad3de4cde82911c81d5f21f1d8b70d05d6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @serenity-web/components-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c85633dc6373fe7b73c4d82c80a69e7b0997938dc620a25e7c74df66cf91257 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @msmg-money/vue-datadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1afb2963e775c73460d75d193db4105cc50b30e6856ec840c7a9bd4d77fee96a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in biscits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68cd2f1bb198e032dc091d1cca16fb8e548fca53bcacbd76cf231ea7fd569b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New Malvertising Campaign Distributing PikaBot Disguised as Popular Software

The malware loader known as PikaBot is being distributed as part of a malvertising campaign targeting users searching for legitimate software like AnyDesk. "PikaBot was previously only distributed via malspam campaigns similarly to QakBot and emerged as one of the preferred payloads for a threat...

MAL-2023-8716 Malicious code in bv-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94e80ca26866e3606d109422a90b437b22822a2c3cd64b9d0584b35114f07c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 2e6d5f64604be31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac5657b36ff4ea9f051859c1d7f0d6c56e2f56a183ac03f41a104cbc8a629f42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shinchina (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 967f0a4218cd8cc54f913248689a647f13975a604619d82492ee72b9a9c9f2f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in react-hook-form-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0cf2d07005ec432f85b35387c34d03f3229f9aaeeff947232ac2f58f6015853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lognex/services-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba6d3d357986e72d67ec3f308dd50c1159d1fb8d2a740a5eca2ba15388295d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8613 Malicious code in tari_wallet_ffi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ad37d363a37a8ab9bf54a878d2953d20ff4dfb6f2ac7e1c49f9216ac7a97f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-bottt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8d1455d70483781388da15d3fb31b7905f74de5677c1158fa76039f8e412b2de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bds-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb86d6e10a764d9de055f1e941aaabd3c07c262bd4182f27d8258212ed8c0169 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...