Malicious code in @evg-ui/lib (npm)

Malicious package. Executes hidden script during install to exfiltrate local IP, hostname, and homedir to an OAST server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee183b500af41035df15810e8e96ba76cf5a758c7d6d647678a1c3930ded627e Any computer that has this...

Malicious code in @zyp3_/api-ecom-errors (npm)

The package contains code that makes a suspicious HTTP request to an OAST domain, suggesting data exfiltration or unauthorized tracking. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3906662b72961a45e2a5f250c4204f6ae4c310f177e6e8dfaa97db0a1566b188 Any computer tha...

Malicious code in dreamteam11-google-oast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3857cd535de263c6bc08caaf87b458f00b7c3c5f19032e63513a2656618c8e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-290 Malicious code in dreamteam11-google-oast (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3857cd535de263c6bc08caaf87b458f00b7c3c5f19032e63513a2656618c8e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...