Malicious code in banana-fxa-project (npm)

The package banana-fxa-project was found to contain malicious code...

MAL-2025-15388 Malicious code in banana-fxa-project (npm)

The package banana-fxa-project was found to contain malicious code...

Malicious code in fxa-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f974a3b678356e1d011ca08a0cb13eaec2f69e2d5ca4056fbfabf9a2864156eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6162 Malicious code in fxa-setting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f974a3b678356e1d011ca08a0cb13eaec2f69e2d5ca4056fbfabf9a2864156eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fxa-setting

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in fxa-auth-server

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in fxa-admin-panel

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in fxa-auth-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001dcafa5fa85d6d5358a1a79909f92615e17cae27329f2b1fea9c1cc51d41ca Any computer that has this package installed or running should be considered...

MAL-2025-6089 Malicious code in fxa-auth-server (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001dcafa5fa85d6d5358a1a79909f92615e17cae27329f2b1fea9c1cc51d41ca Any computer that has this package installed or running should be considered...

Malicious code in fxa-admin-panel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfc8d6e359ce3378ee08ee33fb6c7330c86d113315f9982af07a3a93312ae34 Any computer that has this package installed or running should be considered...

MAL-2025-5812 Malicious code in fxa-admin-panel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddfc8d6e359ce3378ee08ee33fb6c7330c86d113315f9982af07a3a93312ae34 Any computer that has this package installed or running should be considered...

Malware in fxa-shared-110n

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4559 Malicious code in fxa-shared-110n (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a889f866a4713ec27a586224044a1fb0c0bb783cbac2acf7870cc6a07df6c76 Any computer that has this package installed or running should be considered...

Malware in fxa

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2024-8058 Malicious code in fxa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8f1f1a280982015f3ff40190b739a28eacd06aa84937889ff629cf2cb7dd63d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview fxa-customs-server is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

Malicious Package

Overview fxa-payments-server is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packa...

Malicious code in fxa-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98ed0ac9d7db600b89a3182d2eb21eaa58280411b41ac01a569dab47f4963351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3256 Malicious code in fxa-dev-launcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98ed0ac9d7db600b89a3182d2eb21eaa58280411b41ac01a569dab47f4963351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fxa-admin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eea90520b4800eeeb089157ac4413f03f7f2624478b5420eb886c87e530c6b47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...