Malicious code in gulp-cowlict (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8db59a18f3f233797f19b3c4d519d65e0d09df1150474b28ccd16e6d9afbd94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp--topreftixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab70f94054657a22b66857d561db4bd6cb36b38ea4bbba94a5d5e26c823df38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3503 Malicious code in gulp-cowlict (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8db59a18f3f233797f19b3c4d519d65e0d09df1150474b28ccd16e6d9afbd94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3516 Malicious code in gulpplumkber (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd47464aa52fd5f08a53251d7e1d15de115fd0de331656cc6d71a5f337f24d0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3514 Malicious code in gulplosdplucgins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c22d26a691d5c655c5c62f10f64ae9700bc4eba743e44b7e883f8f281a978f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)

glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory:...

Malicious Package

Overview angieslist-gulp-build-tasks is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

Malicious code in gulp-csslint-lesss-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85982fe0ce26bdc8da8bfc26e08e0388a911ab5db3c0c43fc6a0a9633696ca62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3504 Malicious code in gulp-csslint-lesss-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85982fe0ce26bdc8da8bfc26e08e0388a911ab5db3c0c43fc6a0a9633696ca62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oro-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434e907d46d7f142669cb87e668aa0f712aefab3a149d5c724727c7872fdb52e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5125 Malicious code in oro-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 434e907d46d7f142669cb87e668aa0f712aefab3a149d5c724727c7872fdb52e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ux-gulp-theming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf7d1b2ebe5e5b7f1f7f511b711e53f72c1b309f2eaf8d14656e1e2b45d8886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-pypugjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8269d18c3992756798836725a2cfdebc7d0ddcb0fbf1ca340210d923283ad7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3508 Malicious code in gulp-pypugjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8269d18c3992756798836725a2cfdebc7d0ddcb0fbf1ca340210d923283ad7a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mbed-js-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1330123c2d83359c10a783e5a52022f07a271e333cae6b762d8c6caf85d8783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4514 Malicious code in mbed-js-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1330123c2d83359c10a783e5a52022f07a271e333cae6b762d8c6caf85d8783 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3502 Malicious code in gulp-browserify-thin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ef843cda125c2cda337af64084a57a7a79a488e977a9ec4ca912704ab2059c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angieslist-gulp-build-tasks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91073d8aec7654e92fde4a5136f0cb4bd9ec77e2175cae875ab44d249d299818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

gulp-teddy (>=0.0.1, <=1.6.1), roosevelt (>=0.4.9, <=0.4.33) potentially affected by CVE-2021-23447 via teddy (>=0.2.52, <=0.4.28)

teddy NPM version =0.2.52, =0.0.1, =0.4.9, =0.4.33 Source cves: CVE-2021-23447 Source advisory: OSV:GHSA-5F38-9JW2-6R6H...