Malicious code in sinbad-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f181de0b5c41b2ff3139ad931aa14a952a57050fb7f70b4a11175b8fdc2d7f7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in immutable-axelar-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36818770ca9a97d6b714a041348e2e44a341e8d2f017aff4fb1dc912d185e41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodepaysafesdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 262a38bba91b52950dc38de3cc74144bbd62c1e3026190170176fb2fba6d08de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mixpanelexpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3835238b933b46ead226a6a905afb3250547ffd233f3efc2f8f9dab538d310c The OpenSSF Package Analysis project identified 'mixpanelexpo' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

Malicious code in rentez-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d38f5182bdac1a9d1dc8a7edd04bf4887e39416ac443361fbe2b4de7341c0360 The OpenSSF Package Analysis project identified 'rentez-docs' @ 6.6.6 npm as malicious. It is considered malicious because: - The package...

Malicious code in testinbro (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in byfron (npm)

The package contains code to download and execute an infostealer payload...

MAL-2024-10270 Malicious code in @cb-global-design-system-tokens/tailwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f263b2c460c81b4e6f61cc1ce72351cf2f0b2d9ff3b745181715ca4296e22e2 The OpenSSF Package Analysis project identified '@cb-global-design-system-tokens/tailwind' @ 1.0.21 npm as malicious. It is considered malicious...

Malicious code in roboter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa6fc5a9f3575bd0e3c1ad1457b0a23602a4637d3d248679905a79d5d998e607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in edtttsenuity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0205b986eabec98232310d419e800ffe7ca4a2de5e59c843b6eb7bda19c7800 The OpenSSF Package Analysis project identified 'edtttsenuity' @ 99.99.223 npm as malicious. It is considered malicious because: - The package...

Malicious code in sling-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71488d197d0f61aaf0b4572ea62c47f0735db314374038355cbdf5735e7ca1b1 The OpenSSF Package Analysis project identified 'sling-sdk' @ 9.8.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in youreallydontwantthispackage2131 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8bca93b1825c930118e85cc054305e6aef120080f8cc68233467eb6ee7b3ff1d Installing the package attempts to exfiltrate GCP tokens. As it uses a random names and/or targets specific accounts, it's most probably a pentest. --- Categor...

Malicious code in mybasicauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f167c8091f34ef534b8a4fd6d46f2f09c2a268673734c1a7cf37a1ab4218153 The OpenSSF Package Analysis project identified 'mybasicauth' @ 1.0.13 npm as malicious. It is considered malicious because: - The package...

Malicious code in projetmobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71d8a1d00b53e4f04ce0ad77ebfbbb389dd8a22bc6b9a388f22335cf649501ba The OpenSSF Package Analysis project identified 'projetmobile' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in emburse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7f9320f062955ad648d35fec70489fe435e61acd5645c8b8dc6faf8e0c99ede The OpenSSF Package Analysis project identified 'emburse' @ 1.0.2 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in ts-calling-test-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0db756d26a3007b10201297415dfaa2cf6315b37f9ef0b88fa32feac6aaf42bd The OpenSSF Package Analysis project identified 'ts-calling-test-app' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

Malicious code in symphony-scatterplot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e726ee689acd8462ec021757c373dfd8f62595dc76ea919971bdf13659a2d913 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in config-conventional (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9db287fbaa3f09a3e8e30d18616b161cbc82f46c0867a4f8638067c82846d154 The OpenSSF Package Analysis project identified 'config-conventional' @ 20.1.1 npm as malicious. It is considered malicious because: - The packa...

Malicious code in bnppf-font-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a5f2ac07d2b638b2c5e858c36b6c48bcecc7c2bc4c51b99f419f06c2cd5c7c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in agora-rtc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bed49b7fcfa2244aaa6560e20fdf121f7551e8856e6e43f34eb8be1f4a998cc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...