Malicious code in casino.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx feffdfd456f40706d2380c15768e0a8e7449f6c5a2c60d257ef67d5f84d5b6ac Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in gradient-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d41bbe2c82b0cb7c5410006430478c3cc70133f726eda4f584c0f7f943ff938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1545 Malicious code in gradient-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d41bbe2c82b0cb7c5410006430478c3cc70133f726eda4f584c0f7f943ff938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1544 Malicious code in @rsi-core-services/rsi-authorization-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 785efb82835955bfdb6f4000c3dc08a8af40dcaba87135a8c64e306f0e22f141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1513 Malicious code in business_api_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e772f7acd6aafe36bc55e0babdbf512099d3be6de9a89e4dc31dce423b9f5753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1521 Malicious code in hreport-preview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a33613a96a4780a468b53485091475312eb17c0a6c883d4dd09eacfcfc995834 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1514 Malicious code in corporate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d338cc997e0f56baeafd5773af498e1e559144af5aa4319bb9f939aa7f3c934b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in essc-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f5725deb0ef671b11a7413a83f0cfe3a7957ae7ec5a6c7f317ab7fc8b84806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1518 Malicious code in essc-crypto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7f5725deb0ef671b11a7413a83f0cfe3a7957ae7ec5a6c7f317ab7fc8b84806 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afe64eeba91a65d635e6c3f7e03290fbdc9358315362742b8e25f65ce9dc1166 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1529 Malicious code in usaa-page-transition (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f294cfe073939b35b3fbbbaf04226a2d2b42eb889c8efc7fe305df01cef811cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usaa-qtest-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a04103c3f7b9d85cf20b6beb7a9d097048650f41a786c6ab1ef5d620132c27c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1517 Malicious code in ent-disclosure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0fc8ed92b0d19f6d8082cc449fa37e01fb55a55f8391167d18189353b85b9f88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1532 Malicious code in usaa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35bce4289bb065eb9e1460adcc822a34e49647575381e636708872a124ddbf1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Design/Logic Flaw

Dispatch is an open source security incident management tool. The server response includes the JWT Secret Key used for signing JWT tokens in error message when the Dispatch Plugin - Basic Authentication Provider plugin encounters an error when attempting to decode a JWT token. Any Dispatch users...

MAL-2023-1487 Malicious code in stormapps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a1e98042809841fdb34f846c0479100193e348ec2e85909af88516485bbec3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7939 Malicious code in orbitplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df1bde52050b0c84fcf4221afb1f77445edcbfc7e307f2eaf54fb104ce916f06 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-1479 Malicious code in nayan-remake-h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19053998e2ab25df5c7f4d43ec65d58f78399fc9bee16238f06d16e618898019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1480 Malicious code in nayan-remake-tr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b59f0a229cab8bdf4c6b0666a083c7081bcf671e2b656ccb46af90b4c9cf96a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1477 Malicious code in miro-api-clients (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 787331785bd7ba05994172e4c86d95681d3e2e53caf8660a6832eed760fbfb68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...