Malicious code in ebay-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90f4e5751e5f6c07e15364668fd8d7068811404a8ba15818099e884f880adbed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-server-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99319a0fd3901abbb085faaaf7efaf653934eae74c3d6d4e442005aa875e822d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telegramclients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44c77bd3fa6630e7c9766fd7aff1c52888620a548b6f827495df3fed97daed49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ai-plugin-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375f6ac1b62a76dd86681b0fc33bfe8a4162eb0ff032e0d0c96e5bb8735d7953 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in charjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30d644c2eb731d4dcad0bf39f80c41f09bddda4c07d8d2e90ce7a1e1b55716ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-49735

In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Malicious code in outlookapi (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...

Malicious code in sdk-coin-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39dc006518bfc9ed3a2846ae2e407993b19b826cb2c30c0a31bace1a1ee06f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in request-external-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57b443887e773384068e114f407f70b10c0278c6839c0d5c34f2ba575a63a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in site-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08f1194c6e49d7adf88a2a70415fcd789fab720cf63e7121963cff8fe1195fc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in viewport-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 267002a03c6d919765b3d26bea4ac822e509a4829c59b075764cecf051da4722 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in composite-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb0895cfef58bc04374e30ca74fe5937d86332f548841883b7903c9cd2053af0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-atlassian-fecq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2dec5c0511ddd42ff4442d47dd77fed92c193dbb7a478850e568766c16d79986 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ezcolor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14686eb8b73cb1b789f94e4e58993478025e236c7e9fafeeda25a073b1a7760e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem_.status (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211f307dad504f583168502f1e61e0edd3318a06791b8e481b0967452d78495e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mafid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ea964aacb2b5c5379853082d486a78cca6643183ea87eb0d617881910d7e5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zapier-platform-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d31d0615813f82b8b9c9c67647a525eec158961e10cd91db9b2e781d2cc2f9e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mintapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5484db8a5d618c5ab7e297e7b256b682dfc366dbf8955c4ed4ef66972ba7ed64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in contrast-local-scan-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 652706a3541c937da40c2dbeb200974a14635810d37d52b07ae884e52530c6c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lit-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93b9c347ec5af8b365551b745eba546f4653727af02eda54d682aa419d3a6178 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...