Malicious code in cap-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c67eacc7aaa76752177a54808d1dec8de27842394b3a20bcf9b51fc779b9417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in braintree_express_example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d099bf20fe3b1d17efadfd0e185e8a178edf635e5754d26c3710e5b99c2a1404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in d11-conventional-jira-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96c13dcfe4de0265a62b60b68e37699740d2fb78c1dfce5bf1559c110da5e64c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agoda-design-toolkit-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 108287c52cc6b7d73890c29bc9f478cb107ed2906c062820d73eb4d51795eb80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in no-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d16e369369da30f01d71c12e98c478655549b6560cec36be98865bd3a594766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lending-vault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 133b0e4cf25dec04c7c3fb38e07d7d25d2b2cde44a6c4539d991144baa073ec7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deferred-initialization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e4db661b857c9a0cd462997fc4c4b31ac032777bc902b2e3bd8455dc97bd1f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thirdweb-eats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e52053ef8affeeb1437d9466f547c38e3f7d7c1e6a9981ad530707cac1ae736a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodasher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08b73faea89567454093d1817401e11424bb581f04b34625535c369fd513c5b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mobilistensampleapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba7ba55325dffb35b659c0188a1e985d27d4bd66b134d9b73d0008ce1b88a034 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cktool.target.nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7bb040f385e470a714f5c768de33070b7886ae03cb851e1ecb8812b15e94d46 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cktool.database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a77f2f0183569d4d7ca84f3ad18b9973f98fdf4a0a8cdf721b792c13b3f8816 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dotnet-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b999fe97036e14a94f3d11e2d4723b2d5626225acb4f878809bbbd63e07fe3a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bce-service-bos-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 455254dc1b6facea5922040875102470c6bec34eb212c1966f2fda65f5e9277e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rokihfds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7fad727b92f69c33ce99be8084a48ca2fcbbee267db6893b3bcd1a875612cf94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in temp240824 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8a7dd6aaf4dcfd18798c971ed85382e9df124ddf047164ea6b7580ac95d9301 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stripe-testfb-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cd65a10f0ebad6ff909e45ebb515898fc48e522018ebf68f4290dc40ad6d1d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in latam-xp-analytics-plugin-bloomreach (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46687ff096af514b5081dc4a34a83f209ca1ad61f07606c88537ffc54f3054ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in noblox.js-types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61f85b110e2ef99a5f7687d9a38bb17edb801829da495315d60566af54ecd9a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

Threat actors have long leveraged typosquatting as a means to trick unsuspecting users into visiting malicious websites or downloading booby-trapped software and packages. These attacks typically involve registering domains or packages with names slightly altered from their legitimate counterpart...