MAL-2022-1040 Malicious code in api-extractor-test-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d2e8ca531ea558490f3d56526d4d34d2a7e331a33a10d94cfd75f8eff65807e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-244 Malicious code in @epc-libraries/cdk-custom-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28aceef06911da19dfe5a1f64caabdef91e74dc144e17e81f52bd1894737a018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-232 Malicious code in @epc-apps/api-ingestor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1475080989244adedec56990b4f047611496dd13042e21b835e7a53d0e4e7fb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-870 Malicious code in adroit-websdk-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e25eae4b9ba41f852f07d6769513bbe90b6bd7e6771c3780f4ee215da20335e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2101 Malicious code in com.unity.render-pipelines.high-definition-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c67f837ca8ea83c83003168af81c90f02e07a73994e832484930baf383acb5b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4341 Malicious code in loadassh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a16d6eff7d3480c24b394af322fc1b765340f5705f96bf61fbf2473bf1e3432f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious npm package: an0n-chat-lib

The npm an0n-chat-lib package has been identified as malicious and removed from the npm package registry. Remediation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a...

Malicious npm package: discord-fix

The npm discord-fix package has been identified as malicious and removed from the npm package registry. Remediation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a...

GHSA-W8FH-PVQ2-X8C4 Malicious npm package: sonatype

The npm sonatype package has been identified as malicious and removed from the npm package registry. Remediation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a...

[SECURITY] Fedora 32 Update: python-signedjson-1.1.1-3.fc32

Features: More than one entity can sign the same object. Each entity can sign the object with more than one key making it easier to rotate keys ED25519 can be replaced with a different algorithm. Unprotected data can be added to the object under the "unsigned" key...

Malicious Package

Overview The package xpc.js contained malicious code. The package ran a postinstall script that executes two.exe files containing Trojan malware. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that...

GHSA-97MP-9G5C-6C93 Malicious Package in bs58chcek

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in bpi66

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in bpi39

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

GHSA-RV6Q-P3X7-43FX Malicious Package in bitcoimjs-lib

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in bitcoijns-lib

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

GHSA-HWH3-FHF6-73X9 Malicious Package in bictoinjs-lib

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

GHSA-7J93-5M2H-RVJX Malicious Package in bconi

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in babel-loadre

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

Malicious Package in babel-laoder

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...