Malicious code in biconomy-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ccacc09681a6383aa261381df93b651a806293270c031081ae4af8f993652c7 Any computer that has this package install...

Malicious code in biconomy-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc0a0f2ab0beead5e42fd0146fb90778a0a15b54ffa2b9b65db7fb0612c31d5d Any computer that has this package install...

Malicious code in bitflyer-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 863067deead8163671bf5ff2452d5c750b20362617804b94e8add1a563a3c0e4 Any computer that has this package install...

Malicious code in crypto-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a037816e38bab1c99484a360227650688ef0859f5e52d151d3b2c87a0865535 Any computer that has this package install...

Malicious code in htx-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea59d9da68ae649dea49d1c6f68c1e0dffcd2bde5987416db10abf148ada4adc Any computer that has this package install...

Malicious code in gate-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dc14e82a56806231e6081224934a67ef7c9498e2bdf40b67bf26319e05fb536 Any computer that has this package install...

Malicious code in mexc (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ab8e8fa6e2a60969584718143ce29d6022e75891c0cabb07e2caf8b5a0934e Any computer that has this package install...

Malicious code in kraken-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6bd973c5cb350ae3d0073065c89090053475dbaa60a3513856ed9cf349e47b Any computer that has this package install...

Malicious code in toobit-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbef733acdf5215bfdef9bb31af40ec7e1bd2fb0cab3167cf10876e9020e971e Any computer that has this package install...

Malicious code in hcpss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 544fee49e2faae06ce667fd2b9512d17da30686b4bfe050c4bd76c2d06166fa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dex-api-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cebe6e3901a157f586d6d5418f0a6995bf4d085c63acd7730784b55b744e65a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1244 Malicious code in etsy.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1fb9f5d727a671b0737c22729a92ad2c27b39f8dff89f17f5188dc58134b805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fluencelabs.github.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c3788072d85296aa9c456499d5d0923967e28690fd1f3dc6d3fb8e00c2ee33a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slack-azure-notifier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bd85e2ed9b4c56dd6a97f9bec08d80ee181b173bd49ba7f8bd4ea9bdbd421db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in digitalexp-microfrontends-framework (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0ca94db6587b92069f32a0574951f800a7cf2789f0ca5ad3dce95bcb122e205 Any computer that has this package installed or running should be considered...

Malicious code in pegin-cap-evaluator (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54e292579a79498c1323d5f12e8d4265fbb51497c45e3b6ee6105143d97afcdb Any computer that has this package installed or running should be considered...

Malicious code in roro2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8182d2b109432a3af3949760f0339502685090cd2b138efdcf7e7246c17084e Any computer that has this package installed or running should be considered...

Malicious code in apple-sync (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0c8a2862682c8b22d925c82e7abc361ea6cb147190926513d7f7c09af233899 Any computer that has this package installed or running should be considered...

Malicious code in guests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...

Malicious code in markdownalint-cli2 (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f615ed0eb49582f5ed4930017c17f3598a4c92c16cf29edfe4952016fe22210c Any computer that has this package installed or running should be considered...