Malicious code in flow-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0cff9be7c9c3ff28671b9dcf41cf2da25e5f96e860a1c0a8e6d0be715487071b Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in micro-username (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16568c3c83ac6dd335ed741695670ec423436e9f9c4070c7f200d46edc98948b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Beyond the basics: Implementing an active defense

Active defense a key approach to protecting against major threats Having an active defense posture, where the defenders actively use threat intelligence and their own environment telemetry to uncover potential compromises, is the next stage in the cyber security maturity road. Instead of waiting...

Malicious code in @chegg/wtai-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3e4233e6f2d188d7f2bab940bf8574017cf73a97b440daddc7f4e3176075a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thenamk3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 97ee1e5d0d5731dfb998b08ea8e0fcec7a494b67a2c9cd6cc36ea34b284af5c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in private-dependency-test3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 389e0d778e23798e24433a25dc3f689bb12c1e235b3ebbf17de86d9d50a885b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in non-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d658bc317e2ebe7ee942be68627aac6b7acb2e103948c887b7affc37ac8611f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rmbg-disme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70d37810d3abbedf9691f2b539c619e9825f41f082b6c15e87f2e14168e60052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in swisspost (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d696737991f359ea326bffe6ff2cc67a2dda5953c0181554663abd6685b024 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in stats-collect-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad3d02771bbae32c6827b2d78a02c6a6f23d67fca38cc7361fdcd739f0ee4398 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toh-doc-files (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e19436233a047eab780063a658fde54dd5df420b84f4e095b0af5b16f6d7e328 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in railties (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca2a029e076b6bf6c3c47bbc29d4df637c7e966d91a4e95f196e4178397daf1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-qloud-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06ea09cd18d7a4ebab28f95cbef194e9b6e91e9ce5e4e30943af638e29ba6708 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yandex-cfg-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84d83751dd94336617da93fa09ccd8505ecd47f4cbc9ef2dc4d9ea70068c82dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mini-suggest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 895aff62da3563e94b2f4b00f28219c44afa3be20008634bc44dd99567f21361 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-gulp-tanker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33ba0914556ace991c561a50648a0153d6d2ff3dd2b53ca1ada0b870f9cd8c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csp-preset-yastatic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3b468998c2133db7649fa340d2dd942c1a00dcf5c48c6710db77f4c401a4a66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-i-ua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7925e09531fca797d5e885bb3eb62947464435339f718d7e3c1bb97dbd311740 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in karma-jasmine-i-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed0afb956ba7f377036f0c8ef4717a97760b7a00263c1d791ec61995e323cbe7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dca-http-searcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fa09b188b8888ce9d5f3a95948d3823bba2d541295c1b21b49ee876d50d0058 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...