Malicious code in rich-relevance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5443947e62cbe3633e1bc05cb45ee61214822d2115a1f87f6cf25a4c141d226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cst-web-chat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29459986483506a5bda069545676e4bfc990a37afd3dc286ba0e882cc4c8442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in roblox.lua (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e40a28a758bd57252f74153dd5b2a9b6358608bfa2ec08c301e3647a7721e35a The OpenSSF Package Analysis project identified 'roblox.lua' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @assurantlabs/home-device-inventory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a9af4bb0451549784551651c28cdaaa58ba61dff221c8c9b2dced0075f92a10f The OpenSSF Package Analysis project identified '@assurantlabs/home-device-inventory' @ 999.100.1 npm as malicious. It is considered malicious...

Malicious code in @socialdeal/uikit-whitelabel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d53c0749d21786a6b7eeea319c37d26573f1ded671dc9cbed9e4508d9b65a2c0 The OpenSSF Package Analysis project identified '@socialdeal/uikit-whitelabel' @ 999.100.1 npm as malicious. It is considered malicious because:...

Malicious code in uidm-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46d06a0532602d59ada5b5296d3344ff79c9be233ff036127aad80ba624e6e95 The OpenSSF Package Analysis project identified 'uidm-react-lib' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in epc-notification-setting-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e2f6eb6b2d571a457c452301694f5e1f6da8ff1254c78f6837eaef6af78134e The OpenSSF Package Analysis project identified 'epc-notification-setting-web' @ 66.6.9 npm as malicious. It is considered malicious because: -...

Malicious code in scundev-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6b38dd087840ac0c2e03a22124c4b5eead12b96f0cc99579a07a8164172c516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in not-exist-lykos-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9fdf307a333300d88cdb5031c5f135a2fe51e2a01d4db763c2d1457111ce9fe4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc2' @ 66.6.9 npm as malicious. It is considered malicious because: - The...

Malicious code in ui-common-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...

Malicious code in cz-ifood-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65b5439bd3051d2315be6f4ae90f3235c5e41c2d9afa4a3c8f6ff3271c31cb9a The OpenSSF Package Analysis project identified 'cz-ifood-conventional-changelog' @ 1.0.101 npm as malicious. It is considered malicious because...

Malicious code in f3ngtest12345677 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c45841bc7c5a73373ee4764c017a128bb5dd286d34d5d4a2bf649338aa1644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fa096ec56c6910a67c11cdb8b7ebb3bede054bf1ea7eb926fff07e2265c00dc The OpenSSF Package Analysis project identified 'lyft-core' @ 999.3.9 pypi as malicious. It is considered malicious because: - The package...

Backdoor.Win32.Agent.ju (PSYRAT) MVID-2024-0677 Bypass / Command Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/0e6e40aad3e8d46e3c0c26ccc6ab94b3.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.ju PSYRAT Vulnerability: Authentication Bypass RCE Family: PSYRAT Typ...

Malicious code in iotnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfce2833c5b3ba2b663b55cd3c22624573a6d5face271696869b0a3c779910ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in poptoken-builder-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e47c000bd16e968d0cf79cedeb817099f703aeaa335771981d0c5a9f43982b73 The OpenSSF Package Analysis project identified 'poptoken-builder-node' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in fe-bitmovin-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb423933317049482de1eccf90e5786861fc4d50647ce5fa521c0aeb7a164d25 The OpenSSF Package Analysis project identified 'fe-bitmovin-player' @ 99.3.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in optus-sport-ctv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e77d4e5b4d39f3120c7742b9d7a7e79b69f2d5a5ed122b1f57add9d3564a752 The OpenSSF Package Analysis project identified 'optus-sport-ctv' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in sparklog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa3ac41199a392a32d649e60da4ff9d98d6ceb0d956297d976ce3b5dc948dc91 The OpenSSF Package Analysis project identified 'sparklog' @ 0.0.3 pypi as malicious. It is considered malicious because: - The package executes...