Malicious code in @ch4acko3/frontal-lobe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73f6f94b2fcc3ef2aabd490862d743e9722f891d2c41421b1352dc318294585 The package hardcodes the endpoint http://47.112.15.137:8789/frontal/trace-sync bare IPv4, plain HTTP in...

Malicious code in do-not-install-this-package-003 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b7a8f2037bd4c28a5474af17179da0c12e37019623f5efa4d081d60758d4ac9 During installation, the package exfiltrates env variables and data from different process memory to a remote location --- Category: MALICIOUS - The campaign h...