193507 matches found
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Shai Hulud npm Worm Impacts 26,000+ Repos in Supply Chain Attack
The Shai Hulud worm's "Second Coming" has compromised over 26,000 public repositories. We detail the attacker's mistake, the target packages, and mandatory security tips...
MAL-2025-190856 Malicious code in poper-react-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee86d01d82c77cc7c83c6d28159deba7fa26192da0ab69659d92f78f4d41cd60 The package poper-react-sdk was found to contain malicious code. Source: ghsa-malware 2c3b77a8909da7a5fe13a2fba433147468dfa75dee206eaa996325423e38244...
MAL-2025-190854 Malicious code in orbit-boxicons (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bafb55d5f4d1082ed8b15fdeefee0570d3d86fe8b2a13bd046fd62abce85c18 The package orbit-boxicons was found to contain malicious code. Source: ghsa-malware b738b9c09b7dc6b9fd5de0bd3a6006ea4931482eaf62228b6837997f0a625b2b...
MAL-2025-190818 Malicious code in @markvivanco/app-version-checker (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb3390637a7e3c1122d5f1f2417189358dec13936938bd997c1bf5949c1bb8dc The package @markvivanco/app-version-checker was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190828 Malicious code in @trigo/atrix-pubsub (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 774898dc5178ad4bd2128a0ec966ceb51a9cc46c9884a0618869d7525c96260c The package @trigo/atrix-pubsub was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190827 Malicious code in @strapbuild/react-native-perspective-image-cropper-poojan31 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df709f4751b17fa902a24e7675645161e81f578925bc71947858076b163d9d5 The package @strapbuild/react-native-perspective-image-cropper-poojan31 was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190853 Malicious code in open2internet (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbe1cf5da09eaf98a63e880a56f10409eaec90f40d9d3a7938b4bea09aeada36 The package open2internet was found to contain malicious code. Source: ghsa-malware 7df2207057942014062d4c686449d02043f6f221e63ee8014453f995f1429200...
MAL-2025-190838 Malicious code in cpu-instructions (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad988ed4a15a4f88901a6bc82cda5a2e09726ec4529de5a5d3478ce794340f1a The package cpu-instructions was found to contain malicious code. Source: ghsa-malware 99e2bbdca8dd9a2a62e695b54bc5c62b387e43d8e65e138c649077e6c3d8dd...
MAL-2025-190796 Malicious code in @actbase/react-native-simple-video (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9f78c8d60111302902eadd3b683dc87591b36eedaa9ecb63d445745091aee6 The package @actbase/react-native-simple-video was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190758 Malicious code in @strapbuild/react-native-perspective-image-cropper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba56315cb27098d62accc35eb40d71fa885864ff9cf34271f632a07460df65ac The package @strapbuild/react-native-perspective-image-cropper was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190706 Malicious code in @actbase/css-to-react-native-transform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bb30e7704436db9e7ac671839931de450cdcde7408b8c151337c6958433836 The package @actbase/css-to-react-native-transform was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190714 Malicious code in @asyncapi/go-watermill-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88957e3f78294013ec0e22167aec58b8de4dcc65099728725b884c54b6afa328 The package @asyncapi/go-watermill-template was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190763 Malicious code in @zapier/eslint-plugin-zapier (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4f3af0dfab295d120b932902816e065f092b48671909a971a2994cb3cb5afd6 The package @zapier/eslint-plugin-zapier was found to contain malicious code. Source: ghsa-malware...