Malicious code in @ai-agent-node/createnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88461b4fe3bc4e6e16f6dbabec2dd4acdf4eb2df6390170776629e5f955f13f4 @ai-agent-node/createnode ships a 12-line main module that, on require, fetches https://api.github.com/gists/198a0bbec7a6018e9250615d26e37b90 owner:...

Malicious code in teste-depenconfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56a7fcb8d17544bc05d4a5222d7741781d9b33d6ad5d334d6c74b8851d20a257 The OpenSSF Package Analysis project identified 'teste-depenconfu' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in voicemail-main-fsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90ed83674650961e5a0e991ff16430ef0df969b6e843db3202f67a8c78bc9aee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...