MAL-2024-10749 Malicious code in ffers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1366d070bf79e13bd91e0eba911fe052fba662a1a101ba6bc1e39872f3f00bae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hodkasia01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fb637e3836cd2591e09eb9f418dd4a919c7fae2c9ba94291565e186d6634e3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10575 Malicious code in modlog-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3bc2d1d981039b25af543c99dcd5081c70b24b7ee9c3eb7d68b3c96003bd4a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10563 Malicious code in nfs-server-alpine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d66c21af0a19ac1a2dafd01239a6a61a590bdc133e53a71bd9527b2a2708d7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10564 Malicious code in octopus-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4f2d9eb61053da88b3c1c9f3f9cda88f3974f897595acd8e1c42ebef0aec126 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10568 Malicious code in poc-lelouch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5593904da4697f6d80bea8f6926ba9668d25c9ba34ba801115e347ffc19c719c The OpenSSF Package Analysis project identified 'poc-lelouch' @ 1.6.0 npm as malicious. It is considered malicious because: - The package execut...

MAL-2024-10567 Malicious code in plaidreactnativedemo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 891b863e4d747888c84f2d3ea775aef863f28c96649614a6bc0be2d3480318e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10562 Malicious code in mongoose-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fce219918a29ca5834b05f314d7600b12af0243a7e6036b1ed553fb0b41d9cc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10570 Malicious code in spliffy-benchmark (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ead6b661fb169fc63b0a65eb514024ee59694c0b4e6031a27afc765d0089b5d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10558 Malicious code in dancer-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d1f4c0f5ff76788a930b3387f90983f8ef4ae8e8b2064c4829e76954feee04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10566 Malicious code in pixiv-novel-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4e5119a339b3970c17507784181c47d0872a8f642804a5d5a1bd4182e381e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10572 Malicious code in xcasset-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55e5f7e5d499d4113f36ddf1be5df2ac0a49176ca22b7b86e106077f936801fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10559 Malicious code in embrace-helloworld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c1c70726566294b9958ec5ab9d3af0e2d5e1c3dc9451f07055c6b650bfbd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10553 Malicious code in autolink-jira-issue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d899824dec6a9efaddf4482f495ca1b557fc0ec18d4371e0214c6397fd95ee71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10557 Malicious code in com.immutable.orderbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f795b01833e389a9a9ebe458382a107659f9bcd99fc298823315bd263d617ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10556 Malicious code in com.immutable.api.zkevm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abb9b0d7d0aaebe4c9072367919fa4d1ffdf77edb53d312432695954d05b599 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10560 Malicious code in immutable-axelar-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36818770ca9a97d6b714a041348e2e44a341e8d2f017aff4fb1dc912d185e41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10832 Malicious code in affinequant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 afe878283ed977f017256fda3c32fdd8efea0e4c50335d528933e9ea99dcf2a9 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10491 Malicious code in tcms-malicious-package-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbe4f00487fb7bbadba6c2153a5c851ce1c61ce032ba09f3d69c53b49bd0f48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in x2vmlgml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83c3524199594df2a9cfa9a2fc3cb16b03e48c2e6abd67c8fc06b7a5d92d75dd A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...