MAL-2025-1854 Malicious code in instacart-api-client (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1853 Malicious code in instacart-api (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1852 Malicious code in instacart-analytics (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1851 Malicious code in instacart-admin (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-502 Malicious code in instacart-model (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0f156bd66bab53f207eefced759f8bacbfeaa07433a39282c23b0d3b9f816af The OpenSSF Package Analysis project identified 'instacart-model' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-507 Malicious code in instacart-user (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 874a5b26864cb92b47627790269c6a382107aa52df40e08b357a0e00eea63968 The OpenSSF Package Analysis project identified 'instacart-user' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-508 Malicious code in instacart-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9148e4ef72801be1e6f194388e391e2788a1b821aaa108c28f4a832a833f9893 The OpenSSF Package Analysis project identified 'instacart-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-498 Malicious code in instacart-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85e7f03b6318de8c9d6b7d97c107c08e382b2c51f628065e22a1c84e163666d2 The OpenSSF Package Analysis project identified 'instacart-gateway' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-506 Malicious code in instacart-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7c12c62007ba9de65054ea35d0f3c994ab23aacb3799c8ca20103678e4293cea The OpenSSF Package Analysis project identified 'instacart-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-504 Malicious code in instacart-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5184795ac94ad2980f5b2eef95d313e8d6a2d491d42d3d3158a901aaf92d0bee The OpenSSF Package Analysis project identified 'instacart-parser' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-505 Malicious code in instacart-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 873edad68d1d7687dd48205c5e670bcada0b9b13ff27bc030b145c8669257904 The OpenSSF Package Analysis project identified 'instacart-payment' @ 999.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2025-501 Malicious code in instacart-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 535cc528932dede0fbcb6f287ec4fa891c980a4a97c070e887203f5c0ed3f494 The OpenSSF Package Analysis project identified 'instacart-logger' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-503 Malicious code in instacart-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bcb0165ac8368409888b3738226fa768c188f411130de11329b6642118e4e5dd The OpenSSF Package Analysis project identified 'instacart-oauth' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-500 Malicious code in instacart-jira (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6bb1ed726f071b0cab3645a0ca2633a238d3f441c6bdf1d64d7fc0188a2298b The OpenSSF Package Analysis project identified 'instacart-jira' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-499 Malicious code in instacart-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5c4f97fa1af421b8c267a6d72e7078ff0f45e3007987726e95289b4badf3234d The OpenSSF Package Analysis project identified 'instacart-internal' @ 999.9.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2025-497 Malicious code in instacart-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 003102423aeb5ea11be6dd107f680fb93eb897d8c2e772967fd2723e3c50ea24 The OpenSSF Package Analysis project identified 'instacart-event' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in instacart-roulette-daemon-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a3b808e86bd3e62945973ac3b25e0f07437a3031a13b6dd2a0567eba90a63821 During installation, the obfuscated code attempts to exfiltrate basic information about the host. There is no other purpose of the package --- Category:...

MAL-2024-12291 Malicious code in instacart-roulette-daemon-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a3b808e86bd3e62945973ac3b25e0f07437a3031a13b6dd2a0567eba90a63821 During installation, the obfuscated code attempts to exfiltrate basic information about the host. There is no other purpose of the package --- Category:...

MAL-2022-3852 Malicious code in instacart-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d4fca303964617f705359c07130471040d56a62db0f8a2aac529c956aad26ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The skinny on the Instacart breach

The COVID-19 outbreak has affected many facets of our lives—from how we visit our families, socialize with friends, meet with colleagues, to how we should be conducting ourselves outside of our homes. Ideally, a few meters apart from everyone else and with a mask on. These—on top of imposed...