Malicious code in lodasher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b73faea89567454093d1817401e11424bb581f04b34625535c369fd513c5b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mobilistensampleapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba7ba55325dffb35b659c0188a1e985d27d4bd66b134d9b73d0008ce1b88a034 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cktool.target.nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7bb040f385e470a714f5c768de33070b7886ae03cb851e1ecb8812b15e94d46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cktool.database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a77f2f0183569d4d7ca84f3ad18b9973f98fdf4a0a8cdf721b792c13b3f8816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dotnet-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b999fe97036e14a94f3d11e2d4723b2d5626225acb4f878809bbbd63e07fe3a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bce-service-bos-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 455254dc1b6facea5922040875102470c6bec34eb212c1966f2fda65f5e9277e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rokihfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fad727b92f69c33ce99be8084a48ca2fcbbee267db6893b3bcd1a875612cf94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in temp240824 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a7dd6aaf4dcfd18798c971ed85382e9df124ddf047164ea6b7580ac95d9301 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stripe-testfb-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd65a10f0ebad6ff909e45ebb515898fc48e522018ebf68f4290dc40ad6d1d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in latam-xp-analytics-plugin-bloomreach (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46687ff096af514b5081dc4a34a83f209ca1ad61f07606c88537ffc54f3054ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f85b110e2ef99a5f7687d9a38bb17edb801829da495315d60566af54ecd9a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

Threat actors have long leveraged typosquatting as a means to trick unsuspecting users into visiting malicious websites or downloading booby-trapped software and packages. These attacks typically involve registering domains or packages with names slightly altered from their legitimate counterpart...

Malicious code in hyperion-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cfaf98b1da6db2cef1cd44d1a761b02f9c3c4e93ecfb3bf8d8ffd70570c2305e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rbds-frill-auth0-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 150dbdfd8f858852151c86f252e31bbb62cb7fdd4afb0babf23f9817a5a222ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hwueoir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a61bb143d23079ed74f5ec95f7653175efb08a0098c177bb96cff7a2773777f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gswoer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4711da48a5a6e6e6b240bb1221fc83b074973438dcb6d27b5a6d172b8829f5d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in anieort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 027ffa5fb3a536a81f1f8adeda002c165d045deb310cae9a4b9cf590b7603107 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in msldowr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1deb49453f6e6cb108bcccf73c381e5b3769656cbed465b1353f2759312937ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xuworu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1acc43bebaf87047f1a3e650d87d7d46e95536b55031fee016b4d2e91a6aa9ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ptc_creo_parametric_2_0_torrent_top__4fs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9888fffd9dcddf494a18ee48a7b8170ca94fbe732abc2218a3124fd740ad003f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...