Malicious code in react-native-wallet-sdk-demo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca22a1a9bdc58e35b912072adf9e4737394ce3c10cbad067352953e093610bc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in luno-cocoapods (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9bb59e6b577e1a28cf71bf254ef70a0641db3319c1985827f792edb51ea14493 The OpenSSF Package Analysis project identified 'luno-cocoapods' @ 2.8.0 rubygems as malicious. It is considered malicious because: - The packag...

Malicious code in main-branch-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8be08fa3cd592a6d15f6524eac04c1935a0fa11215c4143121b34e3a0de18e15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in realtime-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30a419d00d6726fcd2d97dfde72e8d41922e2fe0a0179c77beae95f697990241 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @starkgate-v2/web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd18cb51b9bfc804c264ad648ce51fda4711022cb95ee99b35e70739222662ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in spacelift-webhook-receiver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bb9dc87c1669be92bee0be50a372fb87d1d92064bc4db257131d4323c2783e9 The OpenSSF Package Analysis project identified 'spacelift-webhook-receiver' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in wdpr-ra-node-mpropz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 06f859971691a195993b3391bbb8b6a83e269eb750856157e81f65d66c2625cf The OpenSSF Package Analysis project identified 'wdpr-ra-node-mpropz' @ 999.999.999 npm as malicious. It is considered malicious because: - The...

Malicious code in myconfusedfunctionpoctestpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7bb8885e6f11e787f3b0b6d58c7b08bcaa2c52c25609aa5728f9e7c4a323eaf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storyblok-rich-text-astro-renderer-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca413e5e4f59154a8de4096af868e37c16b2b9df85e5e20a341283c83e7b1db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mygcpconfusedfunctionpocmaliciouspackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 716d3d7344ecf41184b8427f14e96e4bee1a868051bae909e0f3da2fcea408ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testapi1232 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c8a659ea91462b16b2bb775d50961512a19bdd87a76f49677e378929e0a329d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f53d83b877f02c6e6b51cad5ccf4940a0e19e8e9aeda69d9a9d013ca471bd64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2efbecb91840f3bd10abd707ee59f45fc25c310b59477444324c0d40c7e128bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zmcrypty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee24745300aa11ed0e92813032e7269a17e9c66f73b03ac3e38e6bd613268e1c The OpenSSF Package Analysis project identified 'zmcrypty' @ 66.6.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-1390 Malicious code in suvauxlib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb5b9068f18c537a559453b7350d3d2a6fc61ea7a7988f11236ee6909550a41b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in voiceedgelite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fd93b14a943a875efb1d2602d31cc497e92f135adac765f65f2a0ffd72d6ad42 The OpenSSF Package Analysis project identified 'voiceedgelite' @ 1.1.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in cros_infotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5adad9c6296b06931a0764f6cabfb3fc41199e49b1198f26284cbb0d134f5e17 The OpenSSF Package Analysis project identified 'crosinfotest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in analytics-bp-passive-tracker-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acb2b0591e0d61f597b43b55a8fd70dfcb8aca1d696e09f2a63c4f6f5c5a1959 The OpenSSF Package Analysis project identified 'analytics-bp-passive-tracker-loader' @ 99.99.100 npm as malicious. It is considered malicious...

MAL-2025-602 Malicious code in openbet-access-controller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dd796ac609bd9ccd763f039c5ecfd7fd63b7c76170f3feaba70a4d2148fa881 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-595 Malicious code in digitalexp-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9833903519bade9052cdd1225ca96239d62fbff6d2cfc10be31dc013063ee830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...