Malicious Package

Overview gxm-reference-web-auth-server is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

Malicious code in gxm-reference-web-auth-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9855cd313f0caad339a8d9a7e306fa02de1b2f2a0b2436b0d463a33f78e09c08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview ldtzstxwzpntxqn is a malicious package. A copy-paste of the legitimate package npmi, used by the malicious package gxm-reference-web-auth-server and maintained by the same malicious actor. See gxm-reference-web-auth-server advisory for more information:...

Malicious Package

Overview gxm-reference-web-auth-server is a malicious package. It is a 2-step malware that hides itself, decoys, and deploys a trojan agent on victims' machines. See the full blogpost and synopsis for more information: https://snyk.io/blog/npm-dependency-confusion-attack-gxm-reference/ Related...