Malicious code in @supera/aaaaaaaaaaa (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d347fb8b1e6f331c8dc5ba623c0b5f80932085711d95fd7e3f209c5180b5f79e Any computer that has this package install...

Malicious code in archon1 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7bb776dd2e73bc0826f47abfa61c8a0116dc3a78fd66b3924379c9971278e3b Any computer that has this package install...

Malicious code in explore-assistant (npm)

This package runs commands on import that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e10cb387b2960187d5b207b5b8dd3c8e8583e0c91741a0c4506c05af801ed2 Any computer that has this package installed or running...

Malicious code in metamask-design-tokens-tailwind (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4376a3d800319e2df7e817984307b066ba79cc3b9f0785a2899c7c6deaf11083 Any computer that has this package install...

Malicious code in cse-common-arch--long-running-app--create-vm-cf (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0082d72cd8ecadc18bff535a47c4269d9f8ed6d91c6c4a68c6285abf1fe38320 Any computer that has this package install...

Malicious code in storyblok-rich-text-astro-renderer-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca413e5e4f59154a8de4096af868e37c16b2b9df85e5e20a341283c83e7b1db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gas-oracler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dcca7c831b2e569f7852c9cacf2c86f95466a0a62c77729ada4b88ace35430d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in unmoderated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70f2bf868d2780e6b4d8a00b1e6f3c4385994e32d71be80b2efd5d4636bbc0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in archon2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2efbecb91840f3bd10abd707ee59f45fc25c310b59477444324c0d40c7e128bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pionex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f81458dd3260314fe07718ed1078e94e6d19a15e79f53216483eba4c0b3823a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kcex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ea7892733069986cb86b8c583398828b93f34a8009708be71742bc26402c753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in weex-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b584007c16319ecc4cbb0dadad514e12e33872b44707c476ea044b163bfc335e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1447 Malicious code in weex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5dc8201c1f5628c039b881bee7d0251b1034d1ad7a7ef923c7e8e2d83d2bd28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fameex-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 956f7f7dd723546811c75dba7b1b262c4134f53f4ac86ae38350fcb67fa542eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fameex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f6f8089b0679c02087a65d89ef20472d0da9b5edaf79b78bfb1ae3e662b48e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1428 Malicious code in orangex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75dcd0936faaa1ade20abad6c214921354886d0070329789e51d75e0a82c48f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062b125c8cfefa321028bd1f895bead56560aa024e451572755e38ba1436d597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in p2pb2b-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 239013a9d622d6445f343a6f0649b358c89b51429d2a92f7d64cc09e0fdf3381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hashkey-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cbfb5981f5a265535e71887c445c0c6ecb4ed47efec5a57b4fc30dd22edb527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1400 Malicious code in coinstore-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58dfe66499691e4a2a71a5bd5f3660d8db97c4fbf7f662f3e24b4c0ed0cff3a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...