Malicious code in codat (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c8bc93392923ec301316878a16827003a0537d4e42cdf3daabf1dc2c16cfd5f Any computer that has this package installed or running should be considered...

Malicious code in ar2-common (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2476bf9e09f2fab60aa1b305f5cedcd81dc097e566a795a082e951ebf6c620ef Any computer that has this package installed or running should be considered...

Malicious code in twitter-cldr-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6922d34a8a37d6986abdb98a1e9cfebc0151ed16d0b43cb410e9872171a62a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloudflare-workers-chatgpt-plugin-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b46c4da440b19b277aebc456e9424aa6b70c0b512ba1327db414e22e96576b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lead-marketing-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016aee50e66161e661a3081d1f57bce99eac8911deffc17f059b8b1bec74a13e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in socketdinacom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4459df3f96084582c2521387c98e79539d5c8292c2cd1834447782864728aabd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in overture2osmjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4757db7655e3de9ca7fa7343ca0d8cd59c899c46454ca659ff07261b884f64db Any computer that has this package installed or running should be considered...

Malicious code in k6-learn (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16bc5803188467cda4dd1fe959c79f45cecd30451f206ab0dd7d318ebcf62ac3 Any computer that has this package installed or running should be considered...

Malicious code in bookingcom-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 797af29edb828b7011355ada91e0e1fab75d5725bf2213d65f47f4c1f407987a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angular-blockchain-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d57e81ada5d84957a71a8517f91acfb92043935f30ce2427748fcc55b5514d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in marked-at (npm)

This package contains a PowerShell download cradle to execute a Cobalt Strike beacon and establish command and control. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2adf9556402c124dc6a1146e6c3bb6a90efee66a9a0bbfdeb3188d4477099d2d Any computer that has this packag...

Malicious code in aem-spa-component-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96b1b3d4405a0ea27ac00cb9f96e4e70aa642f96018fa9b52508da4e98f1a6cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-babu-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e749c21a26a377a26000dd72c19e7a3d7e331ead388c3dfdecce559de1dd6db4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prem-babu-fca (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1765fb7e46e7aed9b40aa642e962e113033d9c09c2fb5dba5563bc486baca886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in random-generator-decimal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7a591cc5e685966c005b17774bc77fb8a5d268a3b8591b783932b1fb446341 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parseq-tracevis (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f1942e5a38dc2f1ef479bf37cdc9f9737c8ffc2798503291d72615802a3a699 Any computer that has this package install...

Malicious code in hd-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c943ad884cdece67aea759ea5375c3dd587a13ab027bd8c58966ac0d4eb925a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solaraexecutor (npm)

This package uses obfuscation to hide that its downloading a malicious binary from an attacker-controlled domain --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8807e1265b0c39afd3a6507559deb211f67d9a559b8094aecea14d18f30dcf7 Any computer that has this package...

Malicious code in aws-iot-samples-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 379933a89a9078f046a3ed35489373ccc8c0e070cef4700bbd90d36f087d5569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in widgets-mainappointments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05c4f3cc4d5297de929275823c2b67fd6bb6f8988f85acc300b9e4b342219b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...