Malicious Package

Overview yasap-gulp-tools is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

MAL-2023-630 Malicious code in node-gulp-tanker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33ba0914556ace991c561a50648a0153d6d2ff3dd2b53ca1ada0b870f9cd8c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in node-gulp-tanker

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in node-gulp-tanker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33ba0914556ace991c561a50648a0153d6d2ff3dd2b53ca1ada0b870f9cd8c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@hidoo/express-engine-handlebars (0.8.2), @hidoo/gulp-project-generator (0.19.0) potentially affected by CVE-2021-35065 via glob-parent (6.0.0)

glob-parent NPM version 6.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on glob-parent and may be impacted: - @hidoo/express-engine-handlebars 0.8.2 - @hidoo/gulp-project-generator 0.19.0 Source cves: CVE-2021-35065 Source advisory: MEND:CVE-2021-35...

MAL-2022-3501 Malicious code in gulp--topreftixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab70f94054657a22b66857d561db4bd6cb36b38ea4bbba94a5d5e26c823df38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3503 Malicious code in gulp-cowlict (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8db59a18f3f233797f19b3c4d519d65e0d09df1150474b28ccd16e6d9afbd94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3505 Malicious code in gulp-elsint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a663e5efe598403dc8a9b515674d048b8300441199b7e2e016ddf99c8cc72eab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3506 Malicious code in gulp-filste5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f3f3ec04afdc528ac36fcf80ea3c30bb0d03ac99516cfe0d451b42124a3951b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in gulp--topreftixer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in gulp-lpoada-plugins

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in gulp-elsint

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in gulp-filste5

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in gulp-cowlict

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in gulp--topreftixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab70f94054657a22b66857d561db4bd6cb36b38ea4bbba94a5d5e26c823df38f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-cowlict (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8db59a18f3f233797f19b3c4d519d65e0d09df1150474b28ccd16e6d9afbd94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-elsint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a663e5efe598403dc8a9b515674d048b8300441199b7e2e016ddf99c8cc72eab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-filste5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f3f3ec04afdc528ac36fcf80ea3c30bb0d03ac99516cfe0d451b42124a3951b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gulp-lpoada-plugins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 530fe83bcfab48f3befbe4c33fcdbaaf1ea0eb6f27cd220d060424e3e5b62b5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3514 Malicious code in gulplosdplucgins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c22d26a691d5c655c5c62f10f64ae9700bc4eba743e44b7e883f8f281a978f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...