Malicious Package

Overview mephisto-worker-experience is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

Malicious Package

Overview @roboroxint/elk-logger is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview agoric-servers is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious Package

Overview slg-shared-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in cyclic-dep-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b3aaef1fd0cef844f265736d15a1a280e4d0c1cb453868e12b3142eb4ca089c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codefest-internal-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96d8d666fc5e26bcb66b14c68078fc0ae2f7294bf5ce376aa5e03d9b2f882559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1971 Malicious code in codefest-internal-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96d8d666fc5e26bcb66b14c68078fc0ae2f7294bf5ce376aa5e03d9b2f882559 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-old-npm-sub-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ba226b2ebc7f5544f5dc2c0851a81c6921a1b3504cd845d348daeb0cb13b07c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5181 Malicious code in package-lock.json-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f4f74e56327edc4722f9551e44e52c814f98d54ca2c810f2fcc1d988c8123f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-lock.json-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17f4f74e56327edc4722f9551e44e52c814f98d54ca2c810f2fcc1d988c8123f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.google.external-dependency-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de588a7a3cf800b45db94d69956c418bb8f7aa386ca30a915217ca0c3f8bf900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2034 Malicious code in com.google.external-dependency-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de588a7a3cf800b45db94d69956c418bb8f7aa386ca30a915217ca0c3f8bf900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5185 Malicious code in package_avvo_dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57ebf9b1d3ac13c81686e8068798777d8031bd6a284c289d8cbbac82edd8a54b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-with-range (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e27b581993c977a4ff51fbafd4bfe0947f0f11e6ad971af17b9dd93fa16da97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2437 Malicious code in dependency-with-range (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e27b581993c977a4ff51fbafd4bfe0947f0f11e6ad971af17b9dd93fa16da97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency-from-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e5c03a4db06d5cf53fc442967dfe29dfc02ab2c6526b74ea00b43f1e1a3e76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dependency_confusion_easiscocco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2317c16d255b84462929d93c87b032eb683c0bcac32c6b1b3c64175f08b10920 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2440 Malicious code in dependency_confusion_easiscocco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2317c16d255b84462929d93c87b032eb683c0bcac32c6b1b3c64175f08b10920 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cbe8cc48a41397de5a6b82ddcb8670969e50caf77d451a4e084abbb43d3811d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6750 Malicious code in ui-dependency-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cbe8cc48a41397de5a6b82ddcb8670969e50caf77d451a4e084abbb43d3811d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...