Malicious code in toobit-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc2372cd3e422972f9e5ad734631f8915a68a2543a638d01de026ebb0d04436 Any computer that has this package install...

MAL-2025-1267 Malicious code in internallib_v789 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ef96477214541474a78705d81d93f2cee8bfdff72d03bc45f30c6431bacfb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my_confused_gcp_function_poc_package_v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bec1dc81612b6fc6f899e57800501eadadc25d0715b9dbe6a3a22023a484be6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zkwasm-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6469b76f120091996789c8a222676a36dc660a1a3411c27b232b1938a6b40d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dojo_2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9977fa53d221008b563ff81ff89bc1ebaba9b5b258a2845a3a2aa1dfbe0f302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in etsy.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1fb9f5d727a671b0737c22729a92ad2c27b39f8dff89f17f5188dc58134b805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the devic...

Malicious code in twilio.github.io (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9608b17ef2cbe6a3b456206f03293337dd943e0de3a5924552bebc9b3eb01fff Any computer that has this package installed or running should be considered...

Malicious code in roro3 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb3dbafbc69e88d00a072639d1278fe66ea684bc6a2ef54df6e9757000bd82d9 Any computer that has this package installed or running should be considered...

Malicious code in meeting-card-component (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 388fc50b22e2990c5b37bcc9737237040efb41310d241da7e2dbb65c85a3717d Any computer that has this package installed or running should be considered...

Malicious code in trace-production (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a999b438c9d0580013af18bb1adf831cf8dd84a26de40aeb97cd99fd7b05615 Any computer that has this package installed or running should be considered...

Malicious code in awsume (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48ae94ccc19bb2708cde6df4226ef004dc6c32d150a030e3f50ce89c61d1396f Any computer that has this package installed or running should be considered...

Malicious code in continue-docs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4758de25ad99ec1a3c7b2bc7bfe0e9657ccef34aa389e3f39db67720e64b3705 Any computer that has this package installed or running should be considered...

Malicious code in toptal-react-bikes (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 768639e91eadd87efae2bcea05692ce8e38de966394edb200e220db1132b7500 Any computer that has this package installed or running should be considered...

Malicious code in apple-sdk (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4113cf662e414936dfc540b2ebc7c134b8d83e46635daadf59a0105f86c70feb Any computer that has this package installed or running should be considered...

Malicious code in example-advanced (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe22841f48a20657900f7b7c76268c6243981bb55e440bc22345c6b8831d42f6 Any computer that has this package installed or running should be considered...

Malicious code in my-amazing-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c71c801ccbdb1e61e20e28e334f4941295082217b2970b9359d91fd3781b2466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solana-graphql-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293a02fa1726046ea481def165e8c209dc7e6e1b108bc997d12977ecd4e613f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sol-wallet-adapter-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b73b8c9916aaa68a346fd8bc05ae98f04028ce384654c5ece31bbf68657a7be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ib-ai-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 547c2e4af2cd8eed422db2ccf1d7975144a2418c9663d76dff5e00b13e447347 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...