Malicious code in @brand_apps/easystart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c717d46d6be03f627a5dd22496e0e0f20d6c159f0bf51e222789857061b0397 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-29 Malicious code in @brand_apps/easystart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c717d46d6be03f627a5dd22496e0e0f20d6c159f0bf51e222789857061b0397 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-443 Malicious code in firtssocketia2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c353cdf21295452aa2f8e354ed809efa2c6de59ae16de599dd2c41dc554e0954 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-642 Malicious code in npm-webcomponent-murphysms1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0b45d45606aecca3af110b2638a8f962450a6fae54797e117c100285423dbaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-707 Malicious code in pruebalol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd33e19a8d7f91573d342ed9810411e553657b41394227fd9e33600c45e8f11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-819 Malicious code in superagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d417dfcd3054c03947066c9d5097e7bf561e9b05b055fd5e3caeea7275f4019f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-203 Malicious code in compute-starter-kit-assemblyscript-default (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d22fdf2ac6654a503fea802f494a8beb6fecb1b7b953919da1d01cd04e133958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in google-bard724 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47d49aca642fc265e31226e596698a7acb317389a5c919dd055d972987d40090 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ee-cloud-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81e2426558f083dcdd4aade89e23d39e99ff609b2ec96c53490a9cd4927f98d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wcc-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e55bf83a3393a668485fec2cbcb072ee078657ab4b98b80e3debd7ec3fb83057 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in standforusz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38e449c44fbf714a06802408135b28a615f92b1821aa601f9fa6e14f60f8f832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-809 Malicious code in standforusz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38e449c44fbf714a06802408135b28a615f92b1821aa601f9fa6e14f60f8f832 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-774 Malicious code in shitpa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f105eec84ba3bd36591826bc165b750e76c05d451c3b0039d4f8976fa608da79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in buffer-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 279833dce3a99cfad24c4d603dda5c3b4ed443d44d280456c73eee2a270a3f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-148 Malicious code in buffer-ex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 279833dce3a99cfad24c4d603dda5c3b4ed443d44d280456c73eee2a270a3f5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-167 Malicious code in cfa-styleguide (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5562a6cb1d5f239216be52c28e8d316e8ffe0f490d11978863202a6fcfcbe8bc Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-46 Malicious code in @nokia-csf-uxr/csfwidgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 39bbff0400a8d8025c9c214e1a4412729bd69e23c231e3307d61d05b54f8eb72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1046 Malicious code in json2stringfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2e42c4a993125bac35486d178cd7356e08471fc96b79862efed3c64ae4f1d7d6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-975 Malicious code in xml2yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ede33f285ce592232ffffd5ea89eb8505d88e0d520640d52c721560d06d02f69 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-955 Malicious code in wagyu-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef98b86deb0d82a3874d3caaafddc65b5389ca664ff9bc949a3c3c8ee43a8b83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...