WS-2021-0415

The npm package rc had versions published with malicious code. Users of affected versions 1.2.9, 1.3.9, and 2.3.9 should downgrade to 1.2.8 as soon as possible and check their systems for suspicious activity. Any computer that has this package installed or running should be considered fully...

Malicious code in eslint-config-ezugi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d56fee7da920240c31fc321fe3cf58c9364d91f02c237c95103fbb7d7922dc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10261 Malicious code in gerhtreger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f134193ba18cdd700a042bf6b6fca2d3b9475dea7731883fdce08b9d816eb25f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10263 Malicious code in kbc-ui.templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feade461c80f0216eb60fb0512a4b248d287ed5f597c2270242a8cd5d93a8888 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in plain-headless-portal

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in webhooks-resources-nodejs-server

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-10267 Malicious code in webhooks-resources-nodejs-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a43dfca0a81576880163a0fe81d037a7afb900df7a2de98b47f233cc57cc587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10264 Malicious code in metadata-attacher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6eea908e9ca02abdc2e10b5fd9250bcece1ba385f9605460c33dcf8df855dfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in req-scope (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05048fd5770283947973e00b424f5a1810a67067ed3451a3bb5f9f5a5ce5d703 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in kitsunet

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in webpack4types

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-9394 Malicious code in t8h4q4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4dbe79e5d26237868bbe10b1bad785c327bc37683dd390e1377756f5d1e7b47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9313 Malicious code in 5pjh9i (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b146f124ef7685c191891b06d1253b04cb7df55faa519897a63f8156a8070f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9396 Malicious code in wh2wlc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 872bb759f1a29c8eca5faca021e94e3262216b770ffb7d6bc79d4d682ab895b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agl9v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78e20d511a34d24103b62f848d649aa633dd8a711dfa83942fd04b045ee216aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in w3jp6x (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d73fff393799245c490e4d428b124f043cffc6ee705362ab6c903d2a09e9c95 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 2pozw6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd4b12d769ed0f88b60174d6434217946799552e6e5588cec3eeeee0017a586f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9365 Malicious code in file-alb-um-zip-new-mp3-126009-bitter-sweet-dz7i2-hidryu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a75501436f2395e00123299cf864bf5850d07617243e0205e60c4d3843110c26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9342 Malicious code in avail-able-albu-m-down-load-2014-19330-ultimate-painting-yx7k2-dkxzow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5a7296fbdfdba291f43b1412910adb21a14eeeb9f4aa7f69bcee0466370011d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9378 Malicious code in mp3-do-wnload-file-to-day-32025-moss-side-story-zcimi-mvspdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b123d08fd319f902d9638f0981c9302a2e7c8d43edf179c09571147eaa56bbd0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...