Malicious code in tt4b (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 566cb941a2928e1680d09217c711e1a56aa24333a874bd07cff988cfa17e31eb Any computer that has this package install...

Malicious code in issue-label-notification-action (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff65d59f127c562cf9ea1320a2eacb30540db8dff0ec2237c43f42add231b143 Any computer that has this package install...

Malicious code in ethereumvulncontracthandler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0487271e4934f2a50132c6a3c30213e5a7c8fa71aa50f9d743f14a4cd00cc67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grr-ui (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 345ae424d27b9cf2f744a7f8c06a861ea649e38119ef4321c09f6cccae526d0a Any computer that has this package install...

Malicious code in payouts-banking-info (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d795b5a9cc9952f39cd020e529f31f96f837544ae12bdb31f13d66970d9824d4 Any computer that has this package install...

Malicious code in xeno.dll (npm)

This package uses obfuscation to hide that its downloading a malicious binary from an attacker-controlled domain --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8903fab539c0352f278ee3116807f48f52403f7e26b855fe9d68c3328012200d Any computer that has this package...

Malicious code in v2-foundry (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 761f1bf228ed4db14be182b91d2442d9b00aa33e118b7d0e3e341bf015eac5b9 Any computer that has this package install...

Malicious code in kubehook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b24e2f8ec8704648d97708660341e0d666f21957c858f73fe3ac792df4b2024f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solc-bin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a118f6a7afaf6ac44a23f80203ebef800cb8e0871f3844d83558d2392fb2ebda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12159 Malicious code in types-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdbccb0036f8924ea4cbd7537379dc53101daa7b5d89b3e7c5d060f4b3582a04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @add-wallet-exchange/import-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009dc7d5e85690b3a1fdfe88879a357c8277b755a5983e5e9bcadf1e2624af1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zarf-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8697bcf4cd06bebdca6e5806069048fc48ce173a5deb372b5992e95df3e0103a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in scalavex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c3e20b9de8d5df626f2290f08c5a19243ce682e61ef5b05fc6796febf73e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in internallib_v693 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b605f1a0828894d2e5cf2ca68d55af544c4d645afc65b248e4ff3b0f58418726 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in easytint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e5495864d81fba85645e204088cd7376227401f94eb66f80f2189223f3e167b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in slack-sns (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dde2984debaba750af691ea1ba70116984fba098ecf0fe26a0fdf576d386f53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csp-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07c56da928c82cee1c2a2332c92447b99ae4d8fa17441e9391ac05a4f38d3323 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12028 Malicious code in quintoandar-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4af1eeb8b81ed935d92039b3a23f267d60ba38766214fd0254d9530a3c9b08e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 601d1b950741fa25c188fd49b91f64f95cd11170ccea1ac1e731ba8dee490ef6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in df-npm-placeholder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ca19a9fddea96b90fa1c519971de9c83dfbe33992a851aef82c1d5810f7b7dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...