MAL-2024-1152 Malicious code in discorddevsimple (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c94692a960f7da37c31ff3b9d9c44355a82ffd07bc746bc46afb5b5877b0e1f8 The OpenSSF Package Analysis project identified 'discorddevsimple' @ 3.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8092 Malicious code in react-morning (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ee974f047d12c3a9b1b48783c3c2c6c85e7f4271541509fb5f2003cd34dc197 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1499 Malicious code in jscrambler-dashboard-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a31aff9b73f313c920ebbb6370e3afc3139565f139114ab47ef7859e989f418 The OpenSSF Package Analysis project identified 'jscrambler-dashboard-components' @ 9.9.9 npm as malicious. It is considered malicious because: ...

Malicious code in chartjs-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0694218023b99a066388095e0c9d8de4e8d09473cc88abac25165435e4a5d7d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3726 Malicious code in husy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f668705ebf086cb6ac58d161a6d7de6a355e84822d8e978c7478e2a4b0c2db63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6262 Malicious code in spotify-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8e24e04ec9c9fa1918b8a0fe048dd7a7a8224e0f65a576271d007153e5b99f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6120 Malicious code in signup-ui-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5efd0acaccf47da92b3f4cb09e80de3b56ec88952a48030330e28d308b983e36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1386 Malicious code in azure-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edde9a9b014f0c65522edd8567577d4f97471275e53280f45fe810b4a83c8d62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-167 Malicious code in @chargepoint/cp-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33b6a2ca07df65f1f52a1934bb0aead0473f747f73dfa960f45ed398da7bea37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3141 Malicious code in free-fortnite-skin-epmn1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d8b60e797d4e7ae5da705d08b5f1b12156bac1ef321c874941cb30f95fa3922 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3203 Malicious code in free-tiktok-fans-no-human-verification-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b48688d5ea103c4ba6fe7cdd28c57234b87995dc8cd1c11d83e25e72e0bcc63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-720 Malicious code in @web-utilities/url (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c359c368f368c94fbd1be83ff52e9c7467e5a3bb318a5177510412bf3ead9408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1026 Malicious code in anyblock-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b0fef5d8711fcf53cdd7b0c8a67b2b176a5d445bdffcd870fef9d4a552a757b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4639 Malicious code in mixed-reality-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a272ff336532927814723e7f46c74172123a1b51a46c6cb9d6e8d2554267d90b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2066 Malicious code in com.unity.mathematics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37257a794ebf3ec16e0c1275dd7c56266fcb80b851ef6fa344a7b4b380676bcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-893 Malicious code in agoric-servers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3837c0f56cf1938ad8c653e4e703379b0bebba1dc5e86be8214b8f77a85b78d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-399 Malicious code in @logistics-frontend/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c617a6d61a62b6cadd5b810e4ef2ff8ab74e499dfe400bd5294f7b88e2a09c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-24785

Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm server users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This...

Malicious Package in test-module-a

All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you own any...

GHSA-76XQ-58HJ-VWM2 Malicious Package in test-module-a

All versions of test-module-a contain malicious code as a preinstall script. The package fetches all names of npm packages owned by the user and attempts to add another maintainer to every package as a means of package hijacking, Recommendation Remove the package from your system. If you own any...