MAL-2022-4684 Malicious code in mongo.rabbit.bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef04fad2f4cc89e04245dbb8e3687a649270fe37322fcdb204d24c2a54398277 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4056 Malicious code in js-access-token-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29f1084998eda8c1dc41acf9498dece23356295d341e62f57883b8f5be2125c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6332 Malicious code in stripe-identity-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5745048e2b6cbb598d400a01404828533cdfe3202554f269418b9a1b12205e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-703 Malicious code in @veracrypt/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0b7df8d8f5dc27d49f6c461d83c49bc3c06af2d66853045a56862953fa42ef5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3797 Malicious code in ikxtxeurxgismkw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880c0f8cf4ebf8ceb90a63d7b4437180c084a6e332acbcbe0b3133c937ee363c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4573 Malicious code in metamask-state-log-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74f2aa6b68c9e177ae4997861edb4ebefa1bcd766ce9db1651ed270d20908eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2910 Malicious code in example-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9acfa49bc966fabab653f30edda5447ca4129ec52665880e6e61b5a904a90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4310 Malicious code in link-bubble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb128541a44ae413e9579b66d3986606bf9d4ad01917af2e0c13473ebe3e02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6982 Malicious code in vso-splash-screen-terminals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a406d654e1a2ccf2bf08779d9dcf2f5c58ba3be8b211f2254a521995e7f8cdf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6980 Malicious code in vso-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb422332a19aeef03b4767503a00b97068dcb0b6f6119143f0060dae741b750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6067 Malicious code in sg-dome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100290dc9fe774ec3666aaf8b46114c588901ac78d03a51b506faa31a736ba58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2429 Malicious code in depedence-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc8878b8a028e2ab59027e85e1baf0c886fe76a9803d73594baff2df1359a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2021-27322

Name of the Vulnerable Software and Affected Versions: segv handler affected versions not specified Description: The issue concerns a security reason that led to the removal of the segv handler package, which is now replaced by an empty package containing a README file explaining the removal...

Malicious Package in bowee

Version 1.8.4 of bowee contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...