MAL-2024-9240 Malicious code in mohamedsaqib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d204fafc7fdd817bfb931815ceafce68a6c4ba8b89bec0b85a5878ef6cb2333c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blockscan-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23b097890bdc5ceca69e7a1825d9d9b8ffc6564479e38a2077ec59e2e62f3fc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in get-new-script-viking-simulator-script-apo06a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f491c018e70b39b2ba5ad2f8281e2df852c97072c849c56f3a6b156ffe284be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9145 Malicious code in fanq3f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a313de13485cee7e4885e1deda80fad23737083106c054737c95fe0aa7f7c7e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in latest-update-my-restaurant-script-h-a-c-k-jd9nxv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afa259ca096e2da8913d7e73ec78a1a5d917a209e45c05883679b1b5ea2a1030 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in working-today--soft-aim-fortnite-down-lo-ad-pc-esp-aimbot-undetected-2023-41etdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d8a9f0993744d4972cdf5e672ed1837953cea1a52c4cc63a83e24184de071ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in videojs-sneakpeek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50ede982076cae3541cce714f8770049de3c4cea94a0049eb7ed6e2273852255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in language-rego (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 540256008e129e110408e039bf594aff2061bf0cd955b6b80004f53aa93b9d57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-eval (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0b11cc6d66b7e74be79f7522107db232ad1ead6c66b04f0cc4a564705f5756b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in routerpairs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb612aca210fe84bdd281919ed0cb739a513925811411710570a6391c2d036fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zama.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c7d24b4c936b1a7db36389a502d16c849f6f10f3c0b23614910119088d0cd60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trjhasd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 503e0e46dcc93da1eb303cb9bbab8553340c3c982ec1f1f52ee4d5246afd326d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in videoads-util-capability-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c35439ff6a52f61168d44df9518ac3ee4b0165f2e3e6b8e748d90d105e1c3d27 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xiwoeir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb1d94db067f6098d6410e1d2a798f278db411f0c831d1a43a6fe74c8bc922df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8753 Malicious code in cap-client-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f18ed3c31f0a20e7a224256d46a896df654fcaf6e60ac3f4fac7639672b320f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in litecoin-address-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2f4c4e8a02044ac141a2794e470da413b18acaaa68ae8f39b8276e2b74a95b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bitcoin-address-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bb543ed42a9c4e7386578dde42e2f9f8c6274c88b87358bff00e48a6fa2ea87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dowload_ebok_todas_as_sextas_by_paola_carosella_uz4x6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fc256bc2ec352c5c3f508243cd7ca95fcc61510287dc1dc8a687cc12f6ec9f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in assistance-finder-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736cb085b408315e3153f05af689db208cc6cd59cda88238c550b56a34e55a01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious npm Packages Mimicking 'noblox.js' Compromise Roblox Developers' Systems

Roblox developers are the target of a persistent campaign that seeks to compromise systems through bogus npm packages, once again underscoring how threat actors continue to exploit the trust in the open-source ecosystem to deliver malware. "By mimicking the popular 'noblox.js' library, attackers...