Malicious code in @limebike/frontend-core-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e6a8b7768f00cc5d468fe7a21f8792da1970b60e5ccbad17eefeda1a8d5b3d Package squats the @limebike npm scope and ships a preinstall/postinstall hook node index.js that, on npm install, collects hostname, non-internal...

Malicious code in @bybit-fe/bitd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5077b0e3b0405cb1364268fcb890393fb22d8c31261cdd25f310d0e6e82c5a51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...