Malicious code in guests (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90c450f222886a91d7c733fcfbdf4a4b5104c0b4a1d1931f79e0bea1201f1398 Any computer that has this package installed or running should be considered...

Malicious code in github-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35dc94fcbd18e94c7882aa977128714d48743858a044e9b7ace5f6b8ce8716bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csquill-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb70d66798d8e5c76afe2bd162bc5ff3b1192768a4a261bc7bc2de0d6606cedf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in org.cocoapods.csv (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a3d922335d96d21629591f3c06d391cc64ca4117561dcb9711fb65451dd841e Any computer that has this package install...

Malicious code in theice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a5284ff23f0c6a6b960f00ae8adcf8fd068d714b2689229fa6355a69fc5d778 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zqdl5554 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8b13c7bd38a0b49c7e7527fdeae23dd82f571babe8b8bbf4da2898667faa856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pnpm-run (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d39da4628840938cc4d6581c772a1f0039a45ec515eb70d692ec5032b15ee087 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in k8s-apps-wordpress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40a470c4b317b1c3a7ca0ef77aa42d47d230d8b4d2cfe94f870ae1232c927327 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvaskit-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8fec757cb441808c4cf235ccb1ef0bcf9325ffebc3a5efcc43bc21669e0feb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in realtime-translation-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e34e252889fa5780663d4a11bb4e396af8861e1c5877da57c6e558e553521302 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wixdevpoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 233144e1f7875e1d1028b6101f34a5191e04312b9190d4be6ebcd51fee02c497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupeteer-firefox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e78ebba47b9530f5cec2807eb9cb483e2213f561b35165dbd964249a4814516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

Cybersecurity researchers have discovered a number of suspicious packages published to the npm registry that are designed to harvest Ethereum private keys and gain remote access to the machine via the secure shell SSH protocol. The packages attempt to "gain SSH access to the victim's machine by...

Malicious code in semantic-release-commit-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbcacdbeb834ef3bac1306014ca1f8b13b913671d65327511ddd61712c6a3d09 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in snyk.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76c8b0ab07e37f58fd612860770162ef6e593d6f155a12952b7eafe0afa9ffdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spiffe.io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6eb1b449a426da8cb050cd7559c89a205d1bcc3ad27411fc486afe58b7ab357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in local-node-rig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c27eabc498de725ddfd8be17bff9aec9e4dacaef2050fde05ab89943a28a115 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sigma-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3261ce8608a1d5df2dc6eea25790460c5c3acc3ff03c223d4ece32c799bde4e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bignit.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43b97d2fd30b80db3253e6999e0e6bbc4ba13e245a6eeb28a167f1eeeefec161 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/dignissimos-doloremque-magnam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d87ebb1893495b74b563f0f42621c15a051580f9d0ddf7132cafbb8adaf49ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...