Malicious code in clavue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffc14d0e15af336ff2709e543272d2386d767fe185b380c5f2c2baeb78c3cbf The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in dazaar-payment (npm)

The package 'dazaar-payment' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server npm.jpartifacts.co...

Malicious code in redirect-ytimeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9277037d47468c0c4478c0d43bebb1980e946cbea70391cae6ad12533f8fe78d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in functionteszt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f89c9624602eedd2dd80f4f1044f6395dceaa09eb87fd0af0f2b50a68657fbae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in belvo-integration-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac824b7c99a8a91cbe9763de97d360c8def2db872f6067120575f5672bf27ee2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angara.tablejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb704356644cb89c0c8f006f74249d4c9f4aa5961123223595ec6253d7cf24be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apm-synthtrace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 501f87c261d9652eac673b3a97c22007a4d65d77b7511efef4882fa25a86b153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...