Malicious code in buoyant-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a848aad4ed9b021dd1c4df3717c23fc8ef9578378c9bb92abe8f921a77ea100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in crypto-layout-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fb00ef7ee21b6fc04fbef059a71415a1b6af8daf224b5e56df77ba85fa99351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11209 Malicious code in kubernetes-agent-nfs-watchdog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db3ebdf02f1505d57c21836cf1054215450cdbd8b35ae587c8fdf1c0c59ac85f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pantheon-documentation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4da7ba157a9ffb95066f9d905650ba20227c83563a445aa30218a7eb1efa4e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdp-agentkit-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d53da33893272680319756bf6d56dbd2de8b7d06bc19bd46c65f06c11336031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-JCXM-7WVP-G6P5 Modified package published to npm, containing malware that exfiltrates private key material

Earlier today, a publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material and drain funds from...

CVE-2024-54134

A publish-access account was compromised for @solana/web3.js, a JavaScript library that is commonly used by Solana dapps. This allowed an attacker to publish unauthorized and malicious packages that were modified, allowing them to steal private key material and drain funds from dapps, like bots,...

Malicious code in vue-midata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc06ec1e2eb7c0a1bd2a27e81568ad8ee48c80f63b74284118e768a9740222e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wrapped-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a22c931bcd9ec7e9c378fadf42fe4573d7af2a1656ec01077dd395ee6fdaa488 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11198 Malicious code in web3-executor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cfb15a3594feacf82b4c6e07454995ac76d0913c2b16caadc5eb306b6050723 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11197 Malicious code in stacks-blockchain-dist-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57ff71a1fa8a796d254711f77c61001b106406614239e93a1b59405fc6c1a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d6ef87bdf4981301dbd1430d57248ad6a9606733d297f570edc7d22cf495c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stacks-blockchain-dist-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57ff71a1fa8a796d254711f77c61001b106406614239e93a1b59405fc6c1a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11193 Malicious code in codat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d6ef87bdf4981301dbd1430d57248ad6a9606733d297f570edc7d22cf495c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11184 Malicious code in dcapps-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1dda6406c22ba94ba014724ba09ba61725dfcb8f77984fe08eb729add3d9e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acm-nano-logger-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8669771f2fb91caaf8e8b4059e9466a605b69db4766b85ce718c33d1b09999a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spinal-service-ticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae35c4e4ff6906cb7d4d11279ee76155e4fe161e95d96ecea1f4e61e9a67412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spinal-env-viewer-plugin-group-manager-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d905db5ba537ed47f7f0ba2189c5b72f23c0d8de78591283e86cc1c8651634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-sunset-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 042f734df520ee49c1cf44e40629e136159746964c87533d226f02be765e956e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11131 Malicious code in communication-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24ad613d55f6103dd8e2bc5a903d213746087f94a99f3646d3d13da75b82ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...