7362 matches found
Malicious Package
Overview @js-to-lua/fast-follow-commands is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
Malicious Package
Overview @js-to-lua/convert is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2025-47004 Malicious code in @js-to-lua/convert (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365d73a741a9c8513dad4db978ffd0658d1d583f07281a9a370a78062f36d6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in @js-to-lua/fast-follow-commands
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @js-to-lua/convert
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @js-to-lua/lua-conversion-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in @js-to-lua/handler-utils
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @js-to-lua/convert (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 365d73a741a9c8513dad4db978ffd0658d1d583f07281a9a370a78062f36d6b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2025-59046
The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and...
CVE-2025-58765
wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting XSS vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter requestURL derived from the original request target is directly...
Malicious code in slides-json-markdown-uglify-js (npm)
The package slides-json-markdown-uglify-js was found to contain malicious code...
Malicious code in uglify-js-prosthetics-typeorm-magnetosphere (npm)
The package uglify-js-prosthetics-typeorm-magnetosphere was found to contain malicious code...
Malicious code in geeksforgeeks-js-zh (npm)
The package geeksforgeeks-js-zh was found to contain malicious code...
Malicious code in yildun-epimetheus-uglify-js-relay (npm)
The package yildun-epimetheus-uglify-js-relay was found to contain malicious code...
MAL-2025-46791 Malicious code in yildun-epimetheus-uglify-js-relay (npm)
The package yildun-epimetheus-uglify-js-relay was found to contain malicious code...
MAL-2025-46436 Malicious code in uglify-js-forever-equinox-nodejs (npm)
The package uglify-js-forever-equinox-nodejs was found to contain malicious code...
MAL-2025-46437 Malicious code in uglify-js-prosthetics-typeorm-magnetosphere (npm)
The package uglify-js-prosthetics-typeorm-magnetosphere was found to contain malicious code...
MAL-2025-43467 Malicious code in apachecn-js-zh-pt4 (npm)
The package apachecn-js-zh-pt4 was found to contain malicious code...