Malicious code in ton-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac83c8d18317fa7c1f2fecc782c419c88d798a4e02d25874898824c47e74f1ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twitter-cldr-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6922d34a8a37d6986abdb98a1e9cfebc0151ed16d0b43cb410e9872171a62a79 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arrayref (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 173d873a752e33bfa5cdeb3ccefd21028e662401f7fb6fa22831d99eb490c3cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in microsoft-authentication-libraries-for-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f75669d6664923be2d575d6ea6dd476150b546b8a89bf1af9ee6fd470045b85f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in net8.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8faf7e5349b79c505e870b3a62d093e0f8be16d00ec6cb6d5a8fe5cc64f8d86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in worldcoin-grants-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f434639d184713c5d345b9503077d108e6700344719b5e4825d684743661e01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alex_v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fd7f71d2055970bf8d5dfd581a79586d21cbce83f6caca72431739fa5cde6be9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-nodejs-vsk-with-adm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 268548cd4032a80297c2f7fd9c2e1171027f9ecf4fabcb35debfb7c1fbc0cc13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paypal-standard-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45bb803ebb8e266ab790d8a7ab7ad62d31675c7ed376f7a50bb88c0110816fb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in checkout_sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 153a7813e5b4eb21d53e60e52ce7b5fff2b807f28f0ad3d7d9f4d1e61121ed13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in developer-hub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f7028f9c0bc3315f11a48ce063889decd60554ce5b93de9380c43cb83f4d1971 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dna-mbc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4919122f5b393650aa18a1db8740d7a79cfa480059256e2c386c52ab0a1c8405 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lead-marketing-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 016aee50e66161e661a3081d1f57bce99eac8911deffc17f059b8b1bec74a13e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in packeage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b50411a0f653d34ae98d6d973a1c004d7fa8f67f71b7b6f07b34ed5288af404 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cs-icons-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf6991c8217c461988208239682ccf9c3ea1b42f51a0d382a8360308e951a43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cscchalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66587f2f6462d9fe615b5a03d13cfd464722cf0427aeb9392e4006f6d442d66a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launchpad-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e634713ebf6a8dfa6716324301d5ae77fb7e1081cc18e12d85dc9a2cce5d85a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pulumi-automation-sdk-ssh-tunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa176b4dcf4483a947e659d4d4855bd174744d67a8ed98dadb4ddd425e41ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in turbolinks_jwt_test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b92cfb1f0aae95221f984fee31e7ab9fb4e77b58ef2c53bf6aa33e245bae746d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in requests-async (npm)

The package contains several malicious PowerShell and VBS scripts used to harvest browser data, take screenshots, log keystrokes, and establish startup persistence. It also bundles a password stealer and exfiltrates stolen data via Slack and Discord webhooks. --- -= Per source details. Do not edi...