Malicious code in zqdl0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce9bbe7fd04262b93d13b5234f5edf4d193e5bdb7251a7a51583e670c69af049 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-112 Malicious code in zqdl0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce9bbe7fd04262b93d13b5234f5edf4d193e5bdb7251a7a51583e670c69af049 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-dotenv (npm)

The package contains code to exfiltrate environment variables to an attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3339a5b064b412e57a50444acb2bd685d7e5e7684e6d9ceaa0f1c31ff1f97454 Any computer that has this package installed or running...

Malicious code in walletcore-gen (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

Malicious code in firefox-ios (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8da1499a4dcf0cde084f83cf51955dee40dfa2217bdc1d01d4b71d3359e9d34 Any computer that has this package install...

Malicious code in zqdl111 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad799637c930c5cdd91adee64300966d8a04c8ad1af244ca59d2e0049b86dc3e Any computer that has this package install...

Malicious code in @swiggy-private/aatm-nirbhar-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f8ac2cf93d0a30641db8302b039a8ee0911da0a1b76978e2a97938dc9e6918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @swiggy-private/analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 225aed6cf9dbdada3a5ab91f0b0804c55be22874bb11c2ad67624a420ff39026 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in data-strategy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cfbe801663c651296948ac9f501212d0f2dc63804b79fbbfbbd0534f2468018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in casino-luzern-easter-fronten (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9657421a13075a125eb2aaf87ac5a9a905e170cc658ec3669ce78bcc359327b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12155 Malicious code in solc-bin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a118f6a7afaf6ac44a23f80203ebef800cb8e0871f3844d83558d2392fb2ebda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in types-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbccb0036f8924ea4cbd7537379dc53101daa7b5d89b3e7c5d060f4b3582a04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in contentsdk-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20d682572d937337218240c73c90b9b0b4245feb639e633225bb21bf8f5fc32f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mono-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b64ffe282d49a1f13db908a30b2713843c5dc3ac78ec52d50c8bcf450e401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testbyakash2310xxxxxxxnowaympasti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7818fe132eec6253859eba4bdf2ae393a02cbcba1e5a1f144411a4de2626bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/type-api-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8805bb9462f791743ade0e86d29e6c574fbdd3f67079d132694c9ac3409f0f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zap_contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 063e3a8cd4df1cbe8d271d03490b9f7dd78cbeda98767caf294735ff4cacef75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apache-airflow-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c372df22c9d32de9b2be3a877474b47fc253abc67f5b69d611ebc9640559fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12056 Malicious code in uiqweyruhen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a689bb7cb8496e580d7d1b1f103c603686ac7c6ef203bae7bf208b40890fe2f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in network-test-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f3556105e3d88ae9ead88263d04cf512babaad83e9f169da9751c0b6d86e022 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...