MAL-2024-274 Malicious code in wlwz-2312-1105 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3614b7b169e1e8eba02b43c7e618461936e5304642f43fc54461a415d2c3459c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-279 Malicious code in wlwz-2312-1201 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98632bd2fe1e17696a9fd0b362ae482cb1bac65585ee4ca9047b0e92038a1af5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-692 Malicious code in wlwz-2312-5800 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f96f6776c01b0bad20c67f46b5523dece5292ce9d738606bfb82a67b1a203e3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-136 Malicious code in librct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f5f02ff35835e34a22c3e1381a0888b755d52334e14e61160dff3b9ec4e08b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8192 Malicious code in @zettle-bo/bootstrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 348b20a3785062502338cff3dc24b6f6ed6d517924be7055ceb59e444232a7cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8164 Malicious code in @cat-abdulla/fca-abdulla-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6756f1d86478050a5d2c651a1ef83e1f151c21b753785868a0beac0d401b3ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7987 Malicious code in master-oracle-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5d683c33e479ccc6ca6bb739fae7fc1a6d64781f08d95866becdfdd08e26fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fiji-core-cryptopool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36abda3aa4cfb7fec2c60325ef82189f43f96a97e841253b1f71356f239b99d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1484 Malicious code in youse-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ca53bdb06657a9cd39a9746b31d16a744e10fc843f033e4c726a6f6a2815641 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-702 Malicious code in proof-of-solvency-verification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80842c791023b79222e82ae88ac91bc92a9941cf2a6b08c29042d98fa99363b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-826 Malicious code in sync-https-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 216dcfab006171670a40ded9fe39fcad616a3998fd0c9544be5281a40e766a60 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-615 Malicious code in native-svg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15bc529afd6136e85dade76e843db9a6cd064fdba0b39e6b954819d53bc83d7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitHub Extends Push Protection to Prevent Accidental Leaks of Keys and Other Secrets

GitHub has announced the general availability of a new security feature called push protection, which aims to prevent developers from inadvertently leaking keys and other secrets in their code. The Microsoft-owned cloud-based repository hosting platform, which began testing the feature a year ago...

MAL-2023-832 Malicious code in td-app-finance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf37f106766555425d4a6579374a74778e61776dcdff333df9129a109b4a82d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-883 Malicious code in thenamk3z (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7136bd556e8bf67544b369c2583a529fc5c8dd8153920ecd46d37007562040e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-806 Malicious code in staff-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe42b7ab0f9fa76802d6673661b7ec0a5af18219528d646ee7a037597521471f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-715 Malicious code in python-statface-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6a7521acfc06ff8a2343608ac29b76d6e30bd42edc43de78f47282a5cf65ce9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-262 Malicious code in django-idm-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7500205256afd3e70ea8edbcfa2b5acf17cc55d212296b698b47098c635ef9a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-90 Malicious code in andr0idp4r4n0id_presentation_package_1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8700448c42488be8c5d0f7e8b6e33da7154976ccfc453ab4024fcd714b4435 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6503 Malicious code in test_1_58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce653c2cf590af4b3a9200d29ffc69c313ae4499789ab6b0670ff465bb94f703 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...