Malicious code in novacredit-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6fe3770a3715553aac610a4c183864336d469e9cd4e73d632c9cd788b3b1eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cdpro-redux-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59b127bc162a0536b8fbb2ed7957448cae7028afe71ee85c61504d88f1cf8a36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.visualeffectgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 612fb4f703fb888029e1ae8bf1069fc5719a9288ee946e4210c5127c665c38d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nitro2/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 140caf464a34fc34d7fea71e7561ee5849558b1ee1c7987c9a38c265eb22e4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.formats.fbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 583302188f1d3c02ddb7580ef4df38be05d5acfe23e795966baa799cda4efa8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in badgerdoc-storage (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57170ed58e2cf5e3b4b32f443ae555c7c040f2a395b3505837c90e06add93db5 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

Malicious code in dial-xl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 129b71dc44955e560cd56ff53e0be19aced751699016fa96cb04ee75d2e76e3b Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

Malicious code in program-admin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 79810d0cd56c8a3266dcbe5827dd3d27eb976b353c7b17940a29dddc602df4f7 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

Malicious code in iconnect (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e53aae69656f138607d0de8abe11d4b48ed6156875f07ec0da7485dd776f7158 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

Malicious code in braze-i18n-knockout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca6ae5dbaa6927991987f0b0e26192dcbfc2fbcbeeca91e3cb34621bd6f1a48b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fwm-poc-built-sites (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa93c0829bbd693830f9aeffc69c03a26071b5fe6d560c9b1110c4b52e54da37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in opensource.ripple.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db6640c2642fecbcd1114796262a8099bf2f0db6e5f020af28ce841c8f35e27a The OpenSSF Package Analysis project identified 'opensource.ripple.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in airmason-employee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f8954b40939c6627506907db7e85071941c5095c106f21463227c57f81020a8d The OpenSSF Package Analysis project identified 'airmason-employee' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in crypto-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 21ee45d9d771c938c2a2830fda64f84172fe28c001cb1dd2d725b2c05ea39068 The OpenSSF Package Analysis project identified 'crypto-provider' @ 0.3.4 npm as malicious. It is considered malicious because: - The package...

Malicious code in testveriftest1asdlaaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ff36b3e2ad882727ed964a43d4599f3713d2bada89b6cec169d727127c21c2fa During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in crypto-utility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e212ce9343535d644b46e13584a4a6c0585b2c5482091ca23ea52068b582048e The OpenSSF Package Analysis project identified 'crypto-utility' @ 0.3.4 npm as malicious. It is considered malicious because: - The package...

Malicious code in font-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 404db1db5b86b6ce6ed40f2169b12625d010c431f4610548c55dc053f5d43d69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-platform-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e52fc989383c2ba9b074173be333530aa86b44f1fa38e4a7b156ab1bc4fc6e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-platform-base-components-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b86eb50d9103e65b5af0d24fc0da1302ab769b008a7a2d7c46d686a0fca6d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ui-platform-business-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f863d731ba9d0cbfada890f27b8acb5ae30e8265c71236b451812cbf863be3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...