Malicious Package

Overview @manomano-toolbox/toolkit is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @manomano-toolbox/commercial-operations is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only...

Malicious Package

Overview @manomano-toolbox/hub is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @manomano-toolbox/components is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview @manomano-toolbox/catalog is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @otto-ec/toolbox is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in toolbox-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80bd5635a411f906576afb9ea138bba8e2255f7b8b726a44f8ce36c026532850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in actions-toolbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29b0da7106fb8e35f5515a5df4fc93af48e811fbcea479d55c874769abf0dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-835 Malicious code in actions-toolbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29b0da7106fb8e35f5515a5df4fc93af48e811fbcea479d55c874769abf0dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gd-react-toolbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c25de609c894caa60e13d477a2693cae949d3b2176cef26480a043162c4c154c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3314 Malicious code in gd-react-toolbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c25de609c894caa60e13d477a2693cae949d3b2176cef26480a043162c4c154c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6606 Malicious code in toolbox-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed92faab6ea432842dfa5f3d87e4da52a0e662fa36d83ba58c218a673dee4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolbox-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed92faab6ea432842dfa5f3d87e4da52a0e662fa36d83ba58c218a673dee4d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/async-exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed6043d62007fd2c0e9cbb7d2c4c3f699d6f97ae27a7f8cc5744c19e9128c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-412 Malicious code in @manomano-toolbox/async-exports (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed6043d62007fd2c0e9cbb7d2c4c3f699d6f97ae27a7f8cc5744c19e9128c6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/commercial-operations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f71659970c3cafa581f96a058c5ffb608c3a9c9a465c13cd7abde7b4cbf0e05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-414 Malicious code in @manomano-toolbox/commercial-operations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f71659970c3cafa581f96a058c5ffb608c3a9c9a465c13cd7abde7b4cbf0e05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-415 Malicious code in @manomano-toolbox/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4141fb4b8de9f49fbbe144aa0dacfbda2d8ec36a8314190745e67a161d0bd481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4141fb4b8de9f49fbbe144aa0dacfbda2d8ec36a8314190745e67a161d0bd481 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @manomano-toolbox/api-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db95524e5bf90907d13f9109419d2a10727fd9549c599cad79231ab6359745f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...