MAL-2023-535 Malicious code in johnnygaddarr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6da5d8a94c62941c14d64144f4dbd8b8080a02b3b57cfa0584c05223ae96e13a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-688 Malicious code in pooled-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bdc927e1bd63772731d89e3cd44a51e7fc1d3884ede8cea40821cf6bd0b984c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-613 Malicious code in mypy-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1e1b919537a89780d36cd0352b5a2a78fb75def0b31c115111e26acb0c979c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-150 Malicious code in bykea_node_boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee7671f75f343e3ed72d88d13441eac9e2269d6399266b79952a9a1e9b25a25b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-294 Malicious code in dvf-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf18547f9f147479c4459ff3e5a5ea3c30c2f74abd59960980007211ed420ee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-894 Malicious code in tokenlon-v5-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dceb07244c9168376047cfb891dbdf3048a9003f143fe5e73fad62a14471057e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

You Don't Know Where Your Secrets Are

Do you know where your secrets are? If not, I can tell you: you are not alone. Hundreds of CISOs, CSOs, and security leaders, whether from small or large companies, don't know either. No matter the organization's size, the certifications, tools, people, and processes: secrets are not visible in 9...

MAL-2023-958 Malicious code in waline-magic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a36651e1c228b2c1cc270f4d650d20db1da7126756f6ae78b407b803174a517 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-718 Malicious code in railties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca2a029e076b6bf6c3c47bbc29d4df637c7e966d91a4e95f196e4178397daf1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tiaa-web-ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6307bc57608579648ccf1b24d5afbcd0d7f3c15e8c8da97a2a0d1a6a6e059fa9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-http-uatraits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f641b192ea9d09801f965d0b2e909f40fbc483a2f115e45feafed0376029a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-cfg-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d83751dd94336617da93fa09ccd8505ecd47f4cbc9ef2dc4d9ea70068c82dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-file-match (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 416239cd07c736ee9cda1661d413016b66a35ccd99054f13c8fb5b81fefa02dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-218 Malicious code in csp-preset-yastatic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b468998c2133db7649fa340d2dd942c1a00dcf5c48c6710db77f4c401a4a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-979 Malicious code in yabox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74ab13857c561d1c69db1fcb1c770817f9fa784ec2e34baf91b0b9b915a70f4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-829 Malicious code in tanker-ts-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522cf4fc46b1f24355d942f42a20f8981bf0b260bec099157b4dc2a11f14074a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-895 Malicious code in toolbox-bem-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7d90e4edafca946a3c4746d96347b41770e4cf2fd362e3dcaa984b69e3fc64f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-81 Malicious code in afisha-ab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1f6acfced06bb28f1da7e3cc51340285f7555996b5eedce681e7dc04612deb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in taxi-monitoring (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b9208a01f674d2b8b5f755ebf94aacd6c957f9dc6718f2d801e852745c6cdc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-996 Malicious code in yasap-lodash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3ed03840d6456c9d326a3a199bcd1039912300cb2cb1562720875530d698be8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...