Malicious code in @onerjs/inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08c3c6c201db840a5576941656934704b0932abe72527c5e85b969fd90ad0ccd Package name, version 8.52.2, README, homepage and repository all impersonate @babylonjs/inspector. The shipped code is a 700-byte UMD wrapper that...

Malicious code in peer-deps-external (npm)

The package 'peer-deps-external' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...

Malicious code in peer-deps-lvl2 (npm)

The package peer-deps-lvl2 was found to contain malicious code...

Malicious code in mismatched-peer-deps-lvl1 (npm)

The package mismatched-peer-deps-lvl1 was found to contain malicious code...

MAL-2025-29011 Malicious code in peer-deps-lvl2 (npm)

The package peer-deps-lvl2 was found to contain malicious code...

Malicious code in pkg-with-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2872 Malicious code in pkg-with-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in --legacy-peer-deps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9016f41e70e542399b68b5d9e362563751dedbff976a3bd66808702c420f35f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...