Malicious Package

Overview @epc-infra/cognito-stack is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @epc-apps/api-version-test is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

Malicious Package

Overview @epc-infra/cicd-stack is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @epc-apps/api-management-plan is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious Package

Overview @epc-apps/api-outages is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious Package

Overview @epc-apps/api-ingestor is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in epc-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38889e06f639b709a464f200703bbb6c2ec05b025c69d1002c150cd874ee73db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2766 Malicious code in epc-web-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38889e06f639b709a464f200703bbb6c2ec05b025c69d1002c150cd874ee73db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-apps/edge-lambdas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fac603a15d0ab913153cc8c0364ba23ad7ed7b353172ee00e0876c3fecdbfee3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-tools/typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d64fbc7a86b9e3c8b312ac9e1346369dea4dddbf5ce251fb46f3ebe230104c74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-249 Malicious code in @epc-tools/typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d64fbc7a86b9e3c8b312ac9e1346369dea4dddbf5ce251fb46f3ebe230104c74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-236 Malicious code in @epc-infra/app-lookup-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bbe84e4aa37a9b2484d307db5f4e3ac6dc202acbd2d528d2949bd1c1ce0e43c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-248 Malicious code in @epc-libraries/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 513bf18f392186904a1d77dd47476bde881e1a8f377dc070998c5d1625e72b7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-libraries/kinesis-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2395684a2ae7565ee6ee411ffbdf038c8b48b3c3a2ffe473e90087627b114bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-247 Malicious code in @epc-libraries/kinesis-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2395684a2ae7565ee6ee411ffbdf038c8b48b3c3a2ffe473e90087627b114bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-libraries/data-api-versions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f82fc77aff4c8f44ec626ff023762b926e5407f3b269db521d9006777e956242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-233 Malicious code in @epc-apps/api-management-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcba229feeeaecf4b840caf01dc046b860329625fbae49197bcdbb35289561d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-apps/api-management-plan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcba229feeeaecf4b840caf01dc046b860329625fbae49197bcdbb35289561d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/dynamo-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d45f7863b32e8818b117c91b3f213e270acfa8104a223f2ad0ede0cfadf83e53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @epc-infra/dns-stack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 899932fc30250267552612a2fb30eb0b139b8e3503774b1fddddf95b65f6c618 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...