194104 matches found
Malicious code in @vyzensockets/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65a38578ec3825683bc7646595c0676583ebf4bb3b5c36b5b92c5c7f4537e653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hrp9872 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3863301b783d96a98f60f37331d4a61f921e6dee3c5c35f8788df21da5fd549 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in hrp9871 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c46b73436de569d9a4d38f72d48e9478c74ec6fc572af4c0cf7ccaa666b2ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in npm_pkg_1094 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe875cbf7a0714bb15d688c4eeba441eb6d7f02a73dd3657c11ade00e64bbc00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in npm_pkg_1093 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbcfd38e8ac9c31e28e53af79f450b1bf48ee623593d4dfd77388c945f802653 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rimo-env-validator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56f06dbeb4a580e0e33781dc75aeea4c844f8de804be52f0a43097d85739c53c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in utils-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd71448526f4ee786e1e42e6bdb66627a4f5e8fac78ddb8e8205bd26cc1b0dcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in elf-stats-cranberry-wishlist-933 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6fcbc300aedf740c98f076d87915e27c394b15951161ba52fb5a0583b9585770 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in elf-stats-caroling-stocking-510 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf95a37aa32ab86e8c0039afad9eeb640550fd14146fdf94e39b08c33b4769c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in thepackagethatworks_ (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f15296c09e590124cd0c48b05fe2a07d3a2c798fe5ffe5bbc01fa91e1eeb18c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-14082 Malicious code in google-logging-utils-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in google-logging-utils-internal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60ff4b97c24301c3b850c5c7f2c1a6dfc07c695c2b19c879cc766373f1c2ded2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mw-filesystem-events-nodream-es6 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e79317db717bd6c38646bef40f0e5205e0f42a3174319f95d9b5e7153cc8fa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rtms-manager-dev (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dcee6487432651f905e12482d6a32a94b390cac60f6ece90ac93432d76763af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in expect-bundle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17d9530bd098ecda5041341a338be1a2cfaab1f19e907252bbc95cdd2577dba1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in nolimitcity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdd2f231bad56627ee2a46c05b99f33c745f97daaf7e05adbfbfcea535d7f530 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in saps_secplayground_npm_ai (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13fa9c8b7672d88eb66c92e717080df3e10efc1b6f881b2f7361af0a5a7fbb37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fr-ito-web-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...
MAL-2026-14019 Malicious code in fr-ito-web-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f8b1f66710b1d0686f5d0a6df5989a01bb20a875e380eed8e4be7b94870372e Package's package.json declares both preinstall and postinstall lifecycle hooks that execute node exfil.js on npm install. exfil.js runs whoami and i...