MAL-2022-997 Malicious code in angieslist-composed-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e50e368795012d109d73c296959a8c34f7cdd3786281fec412fec914af10e1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7416 Malicious code in zureexplorer2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5ac15fa86e0c4e3a272e5392ffee3144b6cc3b1e85b26f436d0c0d2ab3453d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2573 Malicious code in dortmond22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 760248828bf200a47a8f8e38cc7ab2a81c896673f96b237b4e363fd2241561a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1540 Malicious code in bfx-hf-func-data (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7631340a32bc76c05bd236bc6011f4f1040460a40997bbec6fe11016748b4029 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6508 Malicious code in testapp00009 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fb396ef5f846069b4adb5738c3c1f69ea523ac3b4b516f1437304f6cdd35f69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6560 Malicious code in threatresponse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c55f07ff7cae84dd3c5283ab53dafe8a9657a3f167f6188d85c5361f7b26a262 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-580 Malicious code in @seller-ui/settings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4674644c2014b06237b7b57625ef3df259e929582417222203faa014af763046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-244 Malicious code in @epc-libraries/cdk-custom-resources (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28aceef06911da19dfe5a1f64caabdef91e74dc144e17e81f52bd1894737a018 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-234 Malicious code in @epc-apps/api-outages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52303d5ff48784b5ed46373ac7162f5ddc5ed3c8c629c696ccacba4c15d8e587 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-230 Malicious code in @epc-apps/alert-servie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89f80ea19d89e7e573ffaa6dd0855cdbf0d0fe7b73a047c7c965c4e3c7e47565 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2020 Malicious code in colors-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d5af6f497e0202edee961786dc6b4e44031f670e8aa5748f10467dc2b286de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2609 Malicious code in dummy-preprocessor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4908ea8244b5d2d0dad36068c074f34b17b6302ce6108fc1526b398a21613794 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6524 Malicious code in testingx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41ceb63dd221afb9f167fecc39fe14258dbd4020d0e62d7f7df94062c2679b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2953 Malicious code in f0-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0bc80ffed72bd61fae6dc05340437a775bd61cb786636c3fdc8ba346429cc9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm_test_nothing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2762093ac3ccb836bc8b7b5f620322cb4637be2e69a6c8128a2b3ba477ef46b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2103 Malicious code in com.unity.searcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14aeba676170a1376e65d8f33d8dea365e9c1d773f411624d9aec9f2d3a21ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5239 Malicious code in payoneer-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3214dbcec3171e906276f2f56836328b487566481b00c467fff3e60a4be19ff6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4342 Malicious code in loaddash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4def3db52eeb4485cf65d99250007139f576a4c3291eafa2a3b7d65ba448b9cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5108 Malicious code in opsie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 426f9b1685691f0a12789895f107fef1a2bf8aa781bfa45688109bcf83c849d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview All versions of http-proxy-middelware contain malicious code. The index.js file attempts to download a file from a remote server and execute it. The file is not run upon installation - the package needs to be required or the index.js run manually. The package contains a typo in its code...