630044 matches found
Malicious code in sams-run-style (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b995469abba673b875788358966c5468456f0a911b1f6e3b5ee95c8f14afb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sams-text-style (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81a7140e2d1a61a8bb4c6594ad8b75cadab20788d22005d9bf026d834c2e626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in graphql-js-client-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c11b1672f9929aa10893cab85bc0f4e9a5ae5adfc2c8ae637d45e61b644692b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16091 Malicious code in sams-text-style (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81a7140e2d1a61a8bb4c6594ad8b75cadab20788d22005d9bf026d834c2e626 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16090 Malicious code in sams-run-style (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14b995469abba673b875788358966c5468456f0a911b1f6e3b5ee95c8f14afb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @staticj/cropperxmjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac36a108b1e9c92a64955277bdfe9a09cdae61504e9a1bfaf40a15c50595139a @staticj/[email protected] ships a modified cropper.min.js that impersonates the legitimate Cropper.js library. At library load, injected code...
MAL-2026-16082 Malicious code in @umschool/platform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf64895a777467cc94763bfb942be3c04040ca151fc22753ca48ac4aaecd69c @umschool/[email protected] is published to public npm under an internal-looking scope with an implausibly high version number, a resolution shape use...
Malicious code in @umschool/platform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf64895a777467cc94763bfb942be3c04040ca151fc22753ca48ac4aaecd69c @umschool/[email protected] is published to public npm under an internal-looking scope with an implausibly high version number, a resolution shape use...
Malicious code in vinnleys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2c109f5566555ce8963688bfbb309220aa3fca570bcee74d32b1a8fcc83c75 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16092 Malicious code in vinnleys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2c109f5566555ce8963688bfbb309220aa3fca570bcee74d32b1a8fcc83c75 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in amprem-activator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb73ef0a9130c0751f253465a40f102cddb6cecdec2835dd7cc9c0f4150efa1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in xbailsync (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18ff4aa1a565659c7106700fc5b7c355770ec8fc6bd62c0d9a4f8efce56bf09f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16084 Malicious code in amprem-activator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bb73ef0a9130c0751f253465a40f102cddb6cecdec2835dd7cc9c0f4150efa1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-16083 Malicious code in @vnxsync/libsignal-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c34a09a0ca8e45d167ab7b26e0b1882a8e2cabffc64495637e884258b3ea57ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @vnxsync/libsignal-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c34a09a0ca8e45d167ab7b26e0b1882a8e2cabffc64495637e884258b3ea57ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in crypto-validates (npm)
[email protected] ships a dist/index.js identical to [email protected]: validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards freshly generated crypto.randomBytes output to the...
Malicious code in pumpswap-sdk-v1 (npm)
[email protected] presents crypto helpers for the PumpSwap SDK, but validateinput base64-encodes its argument and POSTs it to https://pumpswap-sdk.maingoal.xyz/v1/check through checkvalidator in dist/index.js, and randomBytessize forwards the hex output of crypto.randomBytes to the same host...
MAL-2026-16085 Malicious code in crypto-validates (npm)
[email protected] ships a dist/index.js identical to [email protected]: validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards freshly generated crypto.randomBytes output to the...
Malicious code in raydium-clmm-sdk (npm)
raydium-clmm-sdk 0.0.1 and 0.0.2 identical dist/index.js present crypto helpers for the Raydium CLMM, but initKeypaircontent base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check through checkvalidator, and randomBytessize forwards the hex output of...
Malicious code in websetup (PyPI)
[email protected] is a single module whose only function, setup.settext=None, filepath=None in websetup/sender.py, POSTs the given text and the contents of any local file path to a hardcoded Discord webhook id 1546817174411288617; the name Discord returns for it is "backdoor" and swallows every...