Malicious Package

Overview @kraken-frontend/entry-point is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview @kraken-frontend/components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

Malicious Package

Overview @kraken-frontend/test-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

Malicious Package

Overview @kraken-frontend/kraken-api-clients is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerab...

Malicious Package

Overview @kraken-frontend/sentry is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @kraken-frontend/translations is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview @kraken-frontend/kraken-websocket-api-client is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview @kraken-frontend/kraken-internal-api-client is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview flipper-frontend-core is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview oidc-frontend is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

MAL-2022-5132 Malicious code in osmosis-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 691423aa3d58d98e85ab98013119bf2c0915e82dbaf80d29f54afa5dcfc4936b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in osmosis-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 691423aa3d58d98e85ab98013119bf2c0915e82dbaf80d29f54afa5dcfc4936b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5066 Malicious code in omm-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9b77b7e73dde625c8bf9d9f21a73f6fd520dbb22c846db32bf17cfdd324c3da9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in omm-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9b77b7e73dde625c8bf9d9f21a73f6fd520dbb22c846db32bf17cfdd324c3da9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in wakacje-frontend-salki-neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a88e8b205a55c10f5f244c3d0cdcafc5ba0c2744b93f01f6ff91b625168f7dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7035 Malicious code in wakacje-frontend-salki-neon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a88e8b205a55c10f5f244c3d0cdcafc5ba0c2744b93f01f6ff91b625168f7dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ayalon-demo-website-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19a8e8fa18dc522718907d033a494ba3caeb4164e641ae7dc4ab866c88cb8886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1215 Malicious code in ayalon-demo-website-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19a8e8fa18dc522718907d033a494ba3caeb4164e641ae7dc4ab866c88cb8886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3862 Malicious code in inter-frontend-lib-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 433e9627730a86227d62c3f4cce5d81e1971f4cd8b21df14bd1edcca861ecd2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sushiswap-shiny-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5c53008b29715ecd11e4c96835c21437139b870a2d36510e971be22cb33598e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...