448 matches found
Malicious code in watch-full-online-creed-3-free-at-homes (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in useridentity (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in updated-tricks-roblox-robux-generator-2023-de-2qq4udv (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mijngemeente-gateway (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in justgiving (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @juiggitea/asperiores-voluptatum-quos-velit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51842f953b571b5a5a95ce8161377f53b1512d50b20b780fe44d63eab3ddb573 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wlwz-2312-8007 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab1806a5ffb18dd0815ec94b47435c4c31518f75559018ddde6e2bd052c9eb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in aws-encryption-sdk-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ded7612b942b1e3da52d4dfc7abcb64d6ad4bd30d80fac04815238838f9f4763 The OpenSSF Package Analysis project identified 'aws-encryption-sdk-javascript' @ 23.0.0 npm as malicious. It is considered malicious because: -...
Malicious code in tpcvurlpong (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 001eabd8aa23a93db2f17fe69268f9eba2dece879e5cde7dbc93297d6d6279f6 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in selfverpushget (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx fcf07c55939505d25296e89cc5253d215f3a608224a751103fd5b17d8b2307d2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in libpongstringrand (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 83dd8fb7028afb38e2eb5dc136a37669361dc81320acb837ad908b38ebbdfd69 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in esqadpaypal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx f54949ddf332749f5aca529493b4feb5858d68c273c2716b5efbfa2e90826b19 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in selfvisaosint (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx e88195c0e7e71687d4fb561ec6460ea783a4195c87cc3844d42340f4fd535647 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in libultracc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3c5a689545a3b8a15c7609421da49947e5614dbdc6c9c65e54e3db675d70f21f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in loadlgtb (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 39bceaeea9e156e74cf3c25d9f92260518ce592e960fc4cf4014c4585e79a51b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in superram (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 79fbcf578774307ebab34226f0aee5ca322b27b578f1256a46c19164d68d2b93 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
@ahm-monash/public-test (=1.0.0), @alotool/bl-pack (=0.0.1) +157 more potentially affected by CVE-2022-25927 via ua-parser-js (>=0.8.1 <=1.0.32)
ua-parser-js NPM version =0.8.1, =1.2.398, =1.3.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.25.0, =0.26.0 and more Source cves: CVE-2022-25927 Source advisory: OSV:GHSA-FHG7-M89Q-25R3...
Malicious code in atlas-ui-framework (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc726ce71830a76a4cf4537cddb3eb056493e887aa77c9011a189917312244fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in intersting_package_bhavik (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94b4aeedfa83547d766e7896910cefb231937b8ad05b4c6e70483f784752535 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rfcs-tooling (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1abbfacf3954101eb9977beb1c9691c40f0c7192b5350dedcdf4588f4e79d278 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...