Malicious code in ioiwds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 494e4b2b84945fc74e1e445a920046bb23d44ae5bbedb8d1ff988a9899234272 The OpenSSF Package Analysis project identified 'ioiwds' @ 9.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in gwinpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fdd3f3646435d9d7857a19999ffa38cdb99c04b4aa62177b1df6f2710b5412b3 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

Malicious code in tappp-tv-ui-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b52ed9fb8d53c0432591a5d59422157e0340b1851686826a972f0ecd8fd1dbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 0g-storage-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189712c4a0b96b9447f3a3e68e5883de6303d027035935681f2341e68eeccc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in afe-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e9b3e47c7f9d396588edbd5f28fa386e74d8ae03700234402643bd0041c09c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8724 Malicious code in afe-base-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e9b3e47c7f9d396588edbd5f28fa386e74d8ae03700234402643bd0041c09c1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mhnumjp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 371f7362253fbbd65f7a86aac45e8363e35760789892d19b77a4a09ee4d76ecf The OpenSSF Package Analysis project identified 'mhnumjp' @ 1.999.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8707 Malicious code in mhnumjp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 371f7362253fbbd65f7a86aac45e8363e35760789892d19b77a4a09ee4d76ecf The OpenSSF Package Analysis project identified 'mhnumjp' @ 1.999.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @live-backstage/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59a85f5255ffeaed2480c5affaf5967984d6b21631800dee033bd1c44c762ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in artifact-lab-3-package-736f752d (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfb249857a1fcf0c79636d8692dc8b148d847336022dbe6f4ab558f6f5c2f97f Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8044 Malicious code in artifact-lab-3-package-2b6a4744 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c03451c46b9f1a6e1a2ad4df4b3919782e86a4879fa78b7967ae7ec3e694645 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-9451 Malicious code in artifact-lab-3-package-24ddbc49 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74150a24eb8c9d6a2c36b221818de2b3564a62629444438ef666be89914c4c3b Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-9fde789f (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f494a5211d4ea10a131bb54919b6d5e1bf765cea0c3cc018c054e7e304f5856f Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0239eb42a339ea04c20285cf4f4fd719e841f19d6e59a2cbb78f6e982fcea446 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8927 Malicious code in artifact-lab-3-package-db7d716a (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ba3dfc0be54b4fdd3d2d352e658210ad3d22d1108a4d1406320394a55e498f10 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8914 Malicious code in artifact-lab-3-package-4c04b1a2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 73c351156cf1e0c234b98d0e640c60c93c88c92d42109fe64cbb83dd68e82375 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in benasin_logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8976a88d4fd270667bd1f7789de62b7f119041d63970f7c0a04c1ad1437c213f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8010 Malicious code in internal-corp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d9c3e7fab15abf1f202460c879135f1efc55a89e056e8cbf04055a4c77af39 The OpenSSF Package Analysis project identified 'internal-corp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @adidas-data-mesh/consumer-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdc1beaa9fe8440ba69a69eea5a7a92bc1a37479f9bf0c3f0fed177d303befaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @adidas-data-mesh/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...