125 matches found
Malicious code in picnic-store-delivery-miniapp (npm)
--- Credit: OpenSSF source...
Malicious code in picnic-store-basket-miniapp (npm)
--- Credit: OpenSSF source...
Malicious code in picnic-store-delivery-miniapp (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7341 Malicious code in picnic-store-basket-miniapp (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7342 Malicious code in picnic-store-delivery-miniapp (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in picnic-store-basket-miniapp (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious Package
Overview picking-miniapp is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malware in picking-miniapp
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in picking-miniapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65c40c2b2607ac2d8df224c24ff7fcc349a20993fadc53e544289d10a24a510 The package picking-miniapp was found to contain malicious code. Source: ghsa-malware 0d2a7046f9c602dfce90cc2c44cbbd8c7d8c9749929258f31e30fa899794e23...
CVE-2023-31820
An issue found in Shizutetsu Store v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...
CVE-2023-31824
An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function...
CVE-2023-31825
An issue found in Inageya v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Inageya function...
Malware in manual-billing-system-miniapp-api
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in manual-billing-system-miniapp-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fbe247429665dfb3140f405fe662a2c53590e8be9cfeca89a868c826a4fe04f The package manual-billing-system-miniapp-api was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198719
Malicious code in manual-billing-system-miniapp-api npm...
Malware in iron-shield-miniapp
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in iron-shield-miniapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b0e4007bb817da7fd19c6ddd7f073f585337504d8ac60541b07e162398b70 The package iron-shield-miniapp was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190773 Malicious code in iron-shield-miniapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a7b0e4007bb817da7fd19c6ddd7f073f585337504d8ac60541b07e162398b70 The package iron-shield-miniapp was found to contain malicious code. Source: ghsa-malware...