Malicious code in puppeteer-captre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e43376fe07350ae7525fa7c245ca22315733335c14851047c8e8aa1e6cc86ecb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/consectetur-fuga (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17ef07d5c5b09f867f8f230c443ce124712d0de3d66fa9811c0449df32504a0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in platform-client-messaging-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c2d8c135637c1c5dabdcf9238f0a282f34540de11eca662db70ccadf8260ed8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lodash-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a8bd312773fbb24be9c3b0b0f20151edfa60314696b7db82861805252d9fc24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shenmue-dmall.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6cf3e11f9ca2808a4c1a8a8dfa76b54c0aa44588685c9079ae9b9e39837bc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @spgy/eslint-plugin-spgy-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0f153ed03ad775543b9a2c5ba45f744fdb6dc3bdd3de7734a273488881a1353a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

kyc3-sdk (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via ethersjs (0.0.1-security)

ethersjs NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on ethersjs and may be impacted: - kyc3-sdk =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:MAL-2023-315...

safe-transitive-test (0.0.3) potentially affected by unknown CVE via webb3 (0.0.1-security)

webb3 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webb3 and may be impacted: - safe-transitive-test 0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2022-7089...

2-package-manager (1.0.0), @mspguarenteed/common (1.0.4) +3 more potentially affected by unknown CVE via mongoos (0.0.1-security)

mongoos NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on mongoos and may be impacted: - 2-package-manager 1.0.0 - @mspguarenteed/common 1.0.4 - @shopappshree/common =1.0.1, =1.0.4 - calvin-2024 1.0.0 - liana-2024 1.0.0 Source...

Malicious code in qeralport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e2e57e5893ae03419ffe080f8c744eff3d5222a34b972e54049d0f24b86f1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nodenotiier (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 914779ec8a28d8e69a3d7753cc1808a99f9d3030ed7ed56f6357e1d953ac8fb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslintplugnnvue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5280c855233cc4b40984acfaae1e42a0809d267c7bc3598ca1e4c568abdf39a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babelpreset4stag3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df8fe48868e1f0ed1405f13ab7388a1abd2105207728fa0421e87e13032ae279 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lnuhfadctpvbwrsj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0fc4102a37e0cee8ba8d5a6e17a44aa54e889337064af2ca9aabce028b51bec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in createtile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b7fb983275f96b3645774cdf28de94fa8ec30a776e767838e4b1fc7f6c3b072 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in api-unauthed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5650d755201648ea241ab7362b9a52b3cd02ce26970d44ed4b71c50f225b4951 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@soutech/ali-jssdk (>=0.1.0, <=0.1.3), kr-ui-temp (1.0.24) potentially affected by unknown CVE via vertx (0.0.1-security)

vertx NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on vertx and may be impacted: - @soutech/ali-jssdk =0.1.0, =0.1.3 - kr-ui-temp 1.0.24 Source cves: unknown CVE Source advisory: OSV:MAL-2022-6907...

Malicious code in @grubhubprod/chiri (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e77fcfc4afc5e3a98d79abc48a76b4c7c935a17781980e44a4e63d4537285a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @azure-tests/perf-core-rest-pipeline (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ca42c8f3192ddb3d580d2d4b0545b32a1bab2995db500525b2d0b7d21634324 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@atlaskit/editor-plugin-media-editing (>=0.1.0, <=1.2.1) potentially affected by unknown CVE via react-intl-next (0.0.1-security)

react-intl-next NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on react-intl-next and may be impacted: - @atlaskit/editor-plugin-media-editing =0.1.0, =1.2.1 Source cves: unknown CVE Source advisory: OSV:MAL-2022-5650...