Malicious code in oy-cms-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2be7374107b4ac9e28374ee29999f89a1644a7e262cf175cbd223a15958025f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1056 Malicious code in binarium-crm (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0319a4b526e85c3f33642aef37de9fb6a431f79dc995b4829c1bf12b854d8721 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malware in @kennylindahl/malicious-npm-package

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in command-launcher

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in coinbase-wallet-sdk

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1033 Malicious code in eslint-plugin-scp-custom-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8860b8044f2adb9c969cdcf764976c8f9e110be9d0b0a03d095998595aec3938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in eslint-config-scp-custom-rules

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1030 Malicious code in coinbase-wallet-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1892cfeefb3909aa3aed58c0112f2bc9fcb0a762f2242e57c991846a6b8bc875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1025 Malicious code in elastic-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbe3c8eb7407200d7e0976f17ba59d709e62dba4fc1291d71efa92c6761c466e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in docusaurus-plugin-matamo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in docusaurus-template

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in fca-rbtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cddd8e79f7a9a1a19529d126d9dd2e680dbd2eb4a6f10fd40319b957b9bc4864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1119 Malicious code in azuretestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7deb9b5c64a12562c3e7da95ffdfda5b85dca927880cb96345033abab09d4f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azuretestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7deb9b5c64a12562c3e7da95ffdfda5b85dca927880cb96345033abab09d4f08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ethersjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb61e79bc4e6f2ae62699c5ffbdfe08ad8644f715927068e36e3a229e020c970 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in very-bad-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2289bce399400ee41a568ffb19da6c2728513c5f5a8e3f818532bb7b4978d8ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-936 Malicious code in very-bad-transitive-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9acc8ba367a82af4fdbd34224c7bd392db0ce1df3885c0b4ff0de151e2baac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in imposter-pkg-poc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in hui-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81760275602834d1c25fb34cf1add0b3fa5f8c21159848716f9d647cc9b6db5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-401 Malicious code in fca-innova (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dae1d312610e319d7fb61e20452f0003de964afa226f8d6db19b7b40bb8f4af4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...