MAL-2024-9192 Malicious code in umwfv9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d702668733e047a460355de264d94a31914d1008cd15a17f61a71ebafa64154f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9168 Malicious code in new-code-script-f-r-e-e-actors-tycoon-script-t5fhi5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3a5f1736ff58b1ee45e9727786fd5a975016912c7d0aaef296236022638c8fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9199 Malicious code in updated-today-gen-apex-legends-h-a-c-ks-f-r-e-e-glow-and-aimb-ot-safe-to-use-2023-ms0sfd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f8e217b061367a2544f69c657e9f3d6cc3535698498abe94f975e9147d708e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9196 Malicious code in updated-script-restaurant-tycoon-2-script-instant-cook-4dz6cj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 640f25bc6fc6b05d71f2b8eba8e6e12a80c807dc2a91b97e184cfe5926f050c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9204 Malicious code in working-today--1-blocks-every-second-script-n9qfzq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware befe2b725bae28bf00547f7be8107d102adf5ae609e0ed65f03b5ba7a40f0662 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9133 Malicious code in braintree_express_example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d099bf20fe3b1d17efadfd0e185e8a178edf635e5754d26c3710e5b99c2a1404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9174 Malicious code in openai-bun-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 224d5cc373a08c5cb79261ea9fc3c71f16a5b2b64a3582fd82a1f624e541448d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9125 Malicious code in annotation-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2732273e139ee7c5d41de6000e70acf725f550c02141b87340c6a2845111d19c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9135 Malicious code in branch-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1be4b8afeed9f4f3ece58c4cfde48b3909e1c22e69a8267c4e156326a79d7235 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ads-api-report-fetcher (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57e20c733e3432bce50d7684946f0b982e3dd599d8a2df2689208afe1237c24d Any computer that has this package installed or running...

MAL-2024-9217 Malicious code in botframework-webchat-cldr-data-downloader (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 069cec738fcd016cead066052e66581ac130f721c6454d3079b1d054381031e8 Any computer that has this package installed or running...

MAL-2024-9260 Malicious code in ws-api-typescript-infra (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 307f2e541390b49f3169786119b7f694fa2a2da04848f23037e9e101c4cefa85 Any computer that has this package installed or running...

MAL-2024-9221 Malicious code in descriptiongenerator-typescript-runtime (npm)

The package contains code to exfiltrate local machine information to a remote server over DNS. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01ce8c140437db152bce12a94652fc2dbd5af9a9a2792e41ed7cdea5fe8b02c7 Any computer that has this package installed or running...

Malicious code in no-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d16e369369da30f01d71c12e98c478655549b6560cec36be98865bd3a594766 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9088 Malicious code in @test3.svt/first-npm-package-test-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5d0ddb406420abe4a1e74b157a237b13abf8b3b0753309cc30b2d10ceb7de42 The OpenSSF Package Analysis project identified '@test3.svt/first-npm-package-test-2' @ 1.0.0 npm as malicious. It is considered malicious...

MAL-2024-9077 Malicious code in express-core-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5110366d7e4805d37bf5eb7dd940447d8b5d2870ad42cc0c7e44b515332063fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9063 Malicious code in wagmi-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb332a8b9dc641c801bad64051affb8de94c8052e6048aa615f734c0fa9cc6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in notrealpackage-blac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73568a8a9ef3dda38a3e5c29930a0e64d1cc37f21e1cb90f77328c71f83604fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9015 Malicious code in them4on (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cf7aae5da80be4c617408e1862c8307fc970f6cbfdeac0d07c42d5694af6162 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9013 Malicious code in multiple-keys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da4233e3b39779d62d23e578c4ceb25ff5a78a6f0285b709b91ef0cf36ed7d7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...