MAL-2022-546 Malicious code in @qw-app/main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b263b84869036075c7e82527fd72048da177b137cd4f45fa4e1ddcdcad8985b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5336 Malicious code in pingan-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a2e75ef300d4974b61e479326a0de489f547b2e1183cabb8aeae2251c8d69e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3453 Malicious code in greensock-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c4f45f04bf0157b0637b9e05141119d4808e3b720c02fc3f8faf494090b8996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1256 Malicious code in azure-arm-marketplaceordering-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b4a2463f36d3e9bd24f3d0ca72ceee3983872b1b555f31a9dc698e1d8c23d8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1290 Malicious code in azure-arm-storageimportexport-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7b652c2bfd2234d5572f74a8c829d6ba3c5bc908f86b849767cf67e9f780db8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6961 Malicious code in voicemail-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d8ff03edbc056b7f8c7c354d3d1a17c931e507fbc773cc6f7f815278b868e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3990 Malicious code in iv-gtin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eae136e05534a11c4f6f5028c64d8bd259e09ecc63c1be2fa60e0d659115543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-570 Malicious code in @saltstack/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75563d2d7b460d1909f992784d7e77bf0a634b676c914c03c8d4b4a9b9e79319 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-419 Malicious code in @mariacasino/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec85b3df6f2671e8ead99f38eea0f53d2a0cf231849af4e10a2d31ad436148d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4511 Malicious code in mb-blog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 658aa7eb483cfd352b2c2c628d938ac8566bbf7cbb32d0e806867d1abcc8ae24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-666 Malicious code in @tr-digital/react-rehydrate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2599cb34105baaf5c4b9d139c06458eb3358bd0ab2b874bbcedb2e87e4176f51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7106 Malicious code in website-404-error-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73bf65ffbe607175a82640f4548763aeb97f1f0e322c0735470fdccd5d757e43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1577 Malicious code in binance-connector-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93212b28c7f6cbfe91b9f34b01f878171260998a13c7f3e1139188c66a49c06a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you...

Malicious Package

Overview Version 0.1.8 of kraken-api contains malicious code as a postinstall script. When installed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation Any computer that has this package installed or running should be considered fully compromised...

Malicious Package

Overview All versions of saync typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the...