Malicious code in dynamodb-data-mapper-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93e1601651b9c7ac38203563ebdc9231ff5ac6298c9dee85fb2eeae24acdce30 The OpenSSF Package Analysis project identified 'dynamodb-data-mapper-js' @ 7.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in cljs-dopeloop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9232bb9421a218946057ab6688d62120e80b911ca38062d0ae6c42a951d2cddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in projetmobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71d8a1d00b53e4f04ce0ad77ebfbbb389dd8a22bc6b9a388f22335cf649501ba The OpenSSF Package Analysis project identified 'projetmobile' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @taxify/nodejs-common (npm)

--- -= Per source details. Do not edit below this line.=-...

North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

The North Korea-linked threat actor known as Moonstone Sleet has continued to push malicious npm packages to the JavaScript package registry with the aim of infecting Windows systems, underscoring the persistent nature of their campaigns. The packages in question, harthat-api and harthat-hash, we...

Malicious code in watch-full-online-creed-3-free-at-homes (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in useridentity (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in updated-tricks-roblox-robux-generator-2023-de-2qq4udv (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mijngemeente-gateway (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in justgiving (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @juiggitea/asperiores-voluptatum-quos-velit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51842f953b571b5a5a95ce8161377f53b1512d50b20b780fe44d63eab3ddb573 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-8007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab1806a5ffb18dd0815ec94b47435c4c31518f75559018ddde6e2bd052c9eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-encryption-sdk-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ded7612b942b1e3da52d4dfc7abcb64d6ad4bd30d80fac04815238838f9f4763 The OpenSSF Package Analysis project identified 'aws-encryption-sdk-javascript' @ 23.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in tpcvurlpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 001eabd8aa23a93db2f17fe69268f9eba2dece879e5cde7dbc93297d6d6279f6 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfverpushget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fcf07c55939505d25296e89cc5253d215f3a608224a751103fd5b17d8b2307d2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpongstringrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 83dd8fb7028afb38e2eb5dc136a37669361dc81320acb837ad908b38ebbdfd69 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqadpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f54949ddf332749f5aca529493b4feb5858d68c273c2716b5efbfa2e90826b19 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfvisaosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e88195c0e7e71687d4fb561ec6460ea783a4195c87cc3844d42340f4fd535647 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libultracc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3c5a689545a3b8a15c7609421da49947e5614dbdc6c9c65e54e3db675d70f21f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in loadlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 39bceaeea9e156e74cf3c25d9f92260518ce592e960fc4cf4014c4585e79a51b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...