Malicious code in donuts.node-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 589d937e738773f2893caf9608e4b93c3616dad1f93e5d6dc62834864e46182e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in market-apps-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bfa827521d2bb23dfbb0667f88a9b5fe6e0bda6562d84d49943f5f7c0c84611 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rum-speedindex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49eadf01782e0a434253a00c6ff87b88dea1bd449bcac0a138c573fae1e059c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in niroborg-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4a5348649edc33adcbfe7031bc6beb53accae42a84eb62d033f427164f9cc4ea Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2022-7348 Malicious code in yf_hello_world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e7d00e59d8e35322a71178ba2e7d8ad7b245515fee015d99f8d7c4ec5a7d354 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in example-jenkins (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3960f0197c9f666fee1632db8f53719968870e24dbef66ebb5fcc024f017300 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in darshanbro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94cc9d266f6236640c47b7d962f8397bdf397cfc134c5942cd95b105c6bd0819 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ktst (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb3141b0a49c6aae283964304652f6a288257df75c360117959493d9db6ae7aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amitbhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b918083e723ca123e5b5d6dc8e0b4e05438165c8b2442f0229a04e22d60b8c7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New NullMixer Malware Campaign Stealing Users' Payment Data and Credentials

Cybercriminals are continuing to prey on users searching for cracked software by directing them to fraudulent websites hosting weaponized installers that deploy malware called NullMixer on compromised systems. "When a user extracts and executes NullMixer, it drops a number of malware files to the...

Malicious code in @dydxprotocol/solo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414b7a58031d755b2ab4f51d6bfc4bbaf5dad684161eab9b2d1062b8d4ce22df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in buffer_replacer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed7491fc6be30a2763f24ee0be15558529abebc9e31938df9ba36e5c9a4dfb59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testhawaii123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66b622e00e5b47c0f7e724899d169d92211866c0130b21dfadad37992e6f5215 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Microsoft Warns of Large-Scale Click Fraud Campaign Targeting Gamers

Microsoft said it's tracking an ongoing large-scale click fraud campaign targeting gamers by means of stealthily deployed browser extensions on compromised systems. "The attackers monetize clicks generated by a browser node-webkit or malicious browser extension secretly installed on devices,"...

Malicious code in ebayui-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab074972f923b11e148393b0e2759e65eb3b531563049d5b7304d6098384376 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in has-bin-entries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dba5e25de7a276690ce5b73aa657d8f8ef53dfcc54f531205cdb92069886e818 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in useevil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64532de08f717f9b8b574fc60b379cbe7db0f9ad3c687830222af7b3fe126a34 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wvvbch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf85aea835d80198c06087cf0bd4dfe448415bd394e75bd3a2709ba66193bcf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fleetrouting-app-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63fb40b68c60d02e7e83c653ff5903afa31ef091d1911f33bef10ac62f11b2a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wix-bi-logger-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1e185d8229566fd434ef411f0f422b917f946846f53e3b81e0f5c37b3dcb0d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...