Malicious code in @oliviamcdaniel12/safer-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55129478b44191f3a4bb3308036567d5e2eb1a73084511b424917b6b5f7bf50f Package impersonates the popular safer-buffer module. On require, safer.js reads a PID from Porting-Buffer.md and, if that process is not alive, spaw...

Malicious code in hardhat-test-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741350b4472a82c53151793b413166a5fad36af3d2d14fa1d12afba9eccb9fed Package impersonates the well-known eth-gas-reporter / hardhat-gas-reporter packages: README is titled 'eth-test-log', copies badges and contributor...

MAL-2022-7421 Malicious code in ascii2text (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a161cdfe88252de2eba4185ad1460062afc88659f928121253c995367ace33 Security researchers at Check Point Research discovered a malicious package called ascii2text impersonating the PyPI package art. PyPI has since removed...