Malicious code in appboy-web-sdk-v2 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0c15da90dc72a0bf53f2dccb6e0419535a29d50e59fb3de4b5fb7a2f72245ea Any computer that has this package install...

MAL-2024-12134 Malicious code in dev-journey-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 788208b1474e001a223a8caea127bfb7a2d5d4120be3d5ab08e07b886b01b5dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12127 Malicious code in v2raya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae466e2cd9854b6691f27073b78d1015bd7be97736d10c1615bd3dc72ed61fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12110 Malicious code in precompiled-wasabi100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38f3f008b27c846a21dc6b847a1e4a2f4f705d51e81983df2c63a7ef6484a365 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12106 Malicious code in powpeg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 888651be4245ed94e8c3c538181c95691f87e394e03ebe7d425abd55a1f95749 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in id-assert-authz-grant-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17fc73e5465b1055fbe2c1e33fd53d7b12d3ba44276ed9b4bdd77537d89dba51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kubernetes-jobs-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f29c07041ce33c528ad150db3916598a7a3f185ca196c18df969a2dc1ad3d4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11873 Malicious code in ui_next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 623f5936c73485ef7c1a60a9287d34cb92015b753a345a1e2989dfffcaf933ff The OpenSSF Package Analysis project identified 'uinext' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in 32red-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6fd8b74aa90de644864280c7ff35c25fb0c3c059d18172022a417da92eacd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11863 Malicious code in 32red-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c76ac7d57265d4cc494b13ff1a0000ff8cbe225dea90e42a200545dd8359e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11800 Malicious code in yir-image-gen-asana-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 050cc0b4f55e2e2b44e9eaeb0b6b269c8eab27bb007239d6fc7cb318e55f475d The OpenSSF Package Analysis project identified 'yir-image-gen-asana-rce' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in fake-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41407456feff64ada241bb9174752b12b3533a3827629a708296e06c3379fa7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11788 Malicious code in web-app-search (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec79d580d43f835fcecc4698a0de40fde087ff79c80f5941edc641892528eb16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in less-rhino (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e73bfd1ed2aa0b8489fb39ddfc1ac2272730be0a23c877efe7ac2042216feb49 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in debugger-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da70a251342c694608649db1c110acfa3a237913af2c18a951f2bd763ab37d11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ripple-blobvault (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 11bb338f9818afd2b62bcfae1974c0ab6000b8f99f0c2815b33790a14c6beef3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vue-midata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc06ec1e2eb7c0a1bd2a27e81568ad8ee48c80f63b74284118e768a9740222e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11197 Malicious code in stacks-blockchain-dist-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57ff71a1fa8a796d254711f77c61001b106406614239e93a1b59405fc6c1a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11193 Malicious code in codat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d6ef87bdf4981301dbd1430d57248ad6a9606733d297f570edc7d22cf495c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @solana/web3.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507e136eb7d13bd9c88a5e20d692768a759c2ae382d1ab54ba66c196b560cacb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...