MAL-2023-8050 Malicious code in jupiter-emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cdeb64c52b36efc06236636a1e0aa43fe94095a27581170953f6c5119daf634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7947 Malicious code in @bt-lotus-cicd/eslint-config-lotus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d77f679c79d9699e68511d896addd3fddc773bc3f89c4a8f38c6f763f68a903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7918 Malicious code in cms-datocms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac9800b3ed890acb1273186fb6afc84b6334fe3867bb6aa084305adc3310976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7909 Malicious code in discord.js-selfbot-v14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3528a4508610b7617935e551ba3910b26524b8d515354d49c10f939bd73c3ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in casino.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx feffdfd456f40706d2380c15768e0a8e7449f6c5a2c60d257ef67d5f84d5b6ac Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-1513 Malicious code in business_api_client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e772f7acd6aafe36bc55e0babdbf512099d3be6de9a89e4dc31dce423b9f5753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1514 Malicious code in corporate-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d338cc997e0f56baeafd5773af498e1e559144af5aa4319bb9f939aa7f3c934b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1480 Malicious code in nayan-remake-tr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b59f0a229cab8bdf4c6b0666a083c7081bcf671e2b656ccb46af90b4c9cf96a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1464 Malicious code in tianfengqwe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6f7db121452a5fc346f93dedc863aa336e3aaa04145c00616f4e237f003f93f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1458 Malicious code in dependency-exploit-corraldev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3895d5ad9c43461c05e02f878b4bf13a8920b760d569e998be72839879492e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1440 Malicious code in react-dropzone-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2617d06d7f7e79da19c8a24acc1e620c9a46dcf8b6a5087f482081c2badff0de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1048 Malicious code in discordd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97c4e88528a7231605ac5b8ffbae0eb705d1b7cbd05d44bc72f4d26f6b7db7fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in imposter-pkg-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5127f46671b090bf9ac113a3ff87f19d522e0ec80dda844332b9625b30ecf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-935 Malicious code in very-bad-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2289bce399400ee41a568ffb19da6c2728513c5f5a8e3f818532bb7b4978d8ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solodev-cms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1231265823e0166c738416defa7883c13c543b22ed1f2240daa1517f20908741 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-322 Malicious code in expressautomations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aec539f05cce60ebaee5568d0e4a2b2390e2d5ccbef3f43409bbd82e11e12d6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-390 Malicious code in fca-dong (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 869e5a7298ac33a7556237fc57e21644df6d5629aa7dcb99384fb50003fed574 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-398 Malicious code in fca-horizon-remaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d82aee22fcb9d69dc1b8ec8823954165ce545b1ab39eebd6f330094e1b84af84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-743 Malicious code in redox-demo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79098325aa80c4b943aebc29d3857ca921d555eda9dbab3ac40c4388c132ab69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-751 Malicious code in rudder-analytics-js-sdk-sanity-suite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a9bfb278532b1bdf918c36bfb04283d8310809dd470eecffcc72861180059e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...