MAL-2022-5942 Malicious code in sb1-adobe-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa32f2eeba04b7aba401cd8d0132bbd7069239d1c9bd7662831eefec6ccdc5e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-377 Malicious code in @kibt/operation-track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c471df352822441445b896723595fb8555214cc80aaa429baabfcf3bd2010e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-180 Malicious code in @commercialsalesandmarketing/contact-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1e61eaf68c0708ce952ccab5bf707f36175c24e35f12127a74b04dbbf0cfd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5312 Malicious code in pg-ng-popover (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7eae5ce3ffe7a6a45252fbf8e9e7baab3dd7e94d06676793c490eaa77094a06 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4897 Malicious code in nodefreaksolivan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 133ebf0daf34723e0fc46632aeb121137a12b6e015c59d4882b9a0fc0298f9b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1990 Malicious code in coldstone-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d975d3878369d29c7092e7fd70ea5fb373a928396493e718b4e4f8555a0ba46e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1040 Malicious code in api-extractor-test-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e8ca531ea558490f3d56526d4d34d2a7e331a33a10d94cfd75f8eff65807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5577 Malicious code in rainbow-bridge-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c77a9d522ecbb7447f430c4592aa064aa157816d39b65c4da941b07d2b2da05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-244 Malicious code in @epc-libraries/cdk-custom-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28aceef06911da19dfe5a1f64caabdef91e74dc144e17e81f52bd1894737a018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-232 Malicious code in @epc-apps/api-ingestor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1475080989244adedec56990b4f047611496dd13042e21b835e7a53d0e4e7fb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-870 Malicious code in adroit-websdk-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e25eae4b9ba41f852f07d6769513bbe90b6bd7e6771c3780f4ee215da20335e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2101 Malicious code in com.unity.render-pipelines.high-definition-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67f837ca8ea83c83003168af81c90f02e07a73994e832484930baf383acb5b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4341 Malicious code in loadassh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a16d6eff7d3480c24b394af322fc1b765340f5705f96bf61fbf2473bf1e3432f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious npm package: an0n-chat-lib

The npm an0n-chat-lib package has been identified as malicious and removed from the npm package registry. Remediation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a...

Malicious npm package: discord-fix

The npm discord-fix package has been identified as malicious and removed from the npm package registry. Remediation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a...

GHSA-W8FH-PVQ2-X8C4 Malicious npm package: sonatype

The npm sonatype package has been identified as malicious and removed from the npm package registry. Remediation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a...

[SECURITY] Fedora 32 Update: python-signedjson-1.1.1-3.fc32

Features: More than one entity can sign the same object. Each entity can sign the object with more than one key making it easier to rotate keys ED25519 can be replaced with a different algorithm. Unprotected data can be added to the object under the "unsigned" key...

Malicious Package

Overview The package xpc.js contained malicious code. The package ran a postinstall script that executes two.exe files containing Trojan malware. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

GHSA-97MP-9G5C-6C93 Malicious Package in bs58chcek

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in bpi66

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...