MAL-2022-5104 Malicious code in opera-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cfbe56e00b1f2b6404e53195a433e8101e6ae15d77addab0dfad7ce3414b2ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6751 Malicious code in ui-experiments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bc9c1e0e84b03521c6313951aef4909b51b1be51e7c2784cb2c84e412150aca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4094 Malicious code in kaiko-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f38998a28674f6040a3aedf9b07e7223561975de3d58c0b6bb1ddccc0f981d97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1985 Malicious code in coinmetrics-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96740bbd87aabf5d028e4fc1555c145616a25612f9d57a4adaf2ab427656000c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2159 Malicious code in connex-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7295f8eba3551be92116a2102cba3f6febb0b03a2407d1b8e1d3d46459264127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1704 Malicious code in bsc-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 854b63f3ce1000d9e62f9cb2a8473e655c135a81fc99539c80acc4eced17d76e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4478 Malicious code in mapray-js-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3ecca8660783a4112ca158dc2fe08c66a1426982b6eb70ed4dd8094ead87466 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4971 Malicious code in nucleus-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2899c8885b4acca70f37e4611f3d4b1d1dec6c798f39b940216a866a974475d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4949 Malicious code in npmupload_test-xxxxxxxxxxxxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8685e93d3f7de0a3e2581e6ecf6ccc777de2f3a5384e100aac638dcdd96dd4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-394 Malicious code in @logistics-frontend/modules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4cfb4ef58af701fde6a6535d9f669a870e7ef44606fb659eba4368fb835340a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview All versions of plutov-slack-client contain malicious code. Upon installation the package opens a shell to a remote server. The package affects both Windows and nix systems. Recommendation Any computer that has this package installed or running should be considered fully compromised. All...

GHSA-H232-FPQX-MQGR Malicious Package in log-symboles

Version 2.1.0 of log-symboles contains malicious code as a preinstall script. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When installed, the package downloads a file from a remote server, executes it and opens a backdoo...