Malicious code in jade-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b17361af15b63f316aef53a11fb6661254a32f301abc9e431c1c2e08f54bdc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tronlibapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9691194771bc292f5583fcde670bceb7173ec8ec2e1f4a16f1af1322fce21a80 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in vue-sectest (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in teleport-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2c095dd595422be512b9e2f3a57d03c7a65553667c81b51fe163eb11fae8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ecko-dex-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d26b6d8be6f7dbf592bade371103317c029f4297df9557c79997a41d18e2c3c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-llama-cpp-project (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d27e255d94f63ec3b548fa8d9ba50b8565a5b534b5d4ea838571ef729ddec60d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in remix-run-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5399b923491b48948c89e6e1e30d9d3028f6bb8db3bdc9f8d48b513a879ac1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in better_dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4526960d827ae5486d65de8383708d021ba89326b548041564c96bc0aeb9f835 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-hahahaha-rce2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59d51a9f44be7e0cad42ebc638eb04be0e5e9b52503c0a61c2d1561e530de991 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in amazon-codewhisperer-jupyterlab-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a4e17673b58fae37b25deaea3bf55c6fdb9a69285dde321917e6e775d7cdf57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gas-fee-saver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 904ff1206c8caf54d8e6e4625ec9690c0925700de436af0685916b90e17003ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-celo (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in nanovest-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d16e1056fd5093195f09f1074b4a1e5832286639ad292adae94fb8fbb005eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinw-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3fa00c723741623254392df4efea8cb1992992ec41b9cbd448a7d3b478759cb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in deepcoin-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b109e03066101d06f96d699de95cc7de90f7fe2489c1728622e18d5b39de8d54 Any computer that has this package install...

Malicious code in awsume (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48ae94ccc19bb2708cde6df4226ef004dc6c32d150a030e3f50ce89c61d1396f Any computer that has this package installed or running should be considered...

Malicious code in whatsapp-otp-sample-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b68f95ddfc2a8e35a703d6ec0be419b3e447d050bf3672fd492058ea9284651 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-logs-to-datadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d200e2fbb21e126da8ae47ddbca7beebcc675121e65da3b2d699a7162f7c33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coinbase-wallet-history-frontend (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d08d31db0cc340bc756367876047e8d77f4e57cfd409444ec8a9bdf1c08a71e5 Any computer that has this package installed or running should be considered...

Malicious code in dropbox-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14813fcc0aa3e31ac37a8fe31ff8f6d050bebc01d1fcc73ffdd6507d209344a0 The OpenSSF Package Analysis project identified 'dropbox-service' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...