MAL-2023-702 Malicious code in proof-of-solvency-verification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80842c791023b79222e82ae88ac91bc92a9941cf2a6b08c29042d98fa99363b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-826 Malicious code in sync-https-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 216dcfab006171670a40ded9fe39fcad616a3998fd0c9544be5281a40e766a60 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-615 Malicious code in native-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15bc529afd6136e85dade76e843db9a6cd064fdba0b39e6b954819d53bc83d7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitHub Extends Push Protection to Prevent Accidental Leaks of Keys and Other Secrets

GitHub has announced the general availability of a new security feature called push protection, which aims to prevent developers from inadvertently leaking keys and other secrets in their code. The Microsoft-owned cloud-based repository hosting platform, which began testing the feature a year ago...

MAL-2023-832 Malicious code in td-app-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf37f106766555425d4a6579374a74778e61776dcdff333df9129a109b4a82d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-883 Malicious code in thenamk3z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7136bd556e8bf67544b369c2583a529fc5c8dd8153920ecd46d37007562040e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-806 Malicious code in staff-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe42b7ab0f9fa76802d6673661b7ec0a5af18219528d646ee7a037597521471f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-715 Malicious code in python-statface-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a7521acfc06ff8a2343608ac29b76d6e30bd42edc43de78f47282a5cf65ce9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-262 Malicious code in django-idm-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7500205256afd3e70ea8edbcfa2b5acf17cc55d212296b698b47098c635ef9a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-90 Malicious code in andr0idp4r4n0id_presentation_package_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8700448c42488be8c5d0f7e8b6e33da7154976ccfc453ab4024fcd714b4435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6503 Malicious code in test_1_58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce653c2cf590af4b3a9200d29ffc69c313ae4499789ab6b0670ff465bb94f703 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6343 Malicious code in stylleint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1518c0a8ed8b0583f27ace496234bda0a9303a6e53c33ab50948c5d086fa4ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6168 Malicious code in slughifvy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a7ca842916d67596bdff521eb955f87ea1e9a8a0d4f6ba45527f8e2bb1e32515 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4002 Malicious code in jaspine-coer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13c42ed143490f4bce34a6a9f2a4eb9be0a757924b1a670608efa461e53f4045 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3448 Malicious code in grappq2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a0575cd64ea89c5b8a822bfdc35be4f89c8e177ee8ab3d3449834953ba75143 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1735 Malicious code in bv4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e7bec06b06596cc3885720f3e6f5e09dc416da65439664513655a92178d02c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5081 Malicious code in onmnom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251e323f55aadc1d60506340dfc0cfe1a491b60b1b51a4e5036b22bd26106492 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1923 Malicious code in clicio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f598283c90f34d3c0aa37ccb45076f8a14d2c7e39983eb23db03c92a33920812 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6293 Malicious code in starbuckssystem.website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5c3b684ff09f55f7a42805fb292e795100ead7576f8ab8af399dd0991721c68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1564 Malicious code in bifrostmigrationmonitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d26e2a177ba05a3606fde838ec61a348d69c627136bba930f3300a84762da437 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...