Malicious code in @lbnqduy11805/stunning-fishstick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b1698a95126b49cf4de64fe4eb7992fc33dc6fd9d81197fa0bc6ac1bece66f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in node-production (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20bbb441be4cc94e35a3bf9c020b6d6106d034a75a335ae40fe4528934720fe0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CherryTree Impostor Dubbed CherryLoader Makes Its Move

Summary: CherryLoader, a new Go-based downloader, has surfaced in cyber attacks, masquerading as the legitimate CherryTree note-taking app. This sophisticated threat infiltrates compromised hosts, delivering malicious payloads such as privilege escalation tools for exploitation and persistent...

Malicious code in wlwz-2312-6802 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4a48a8fcdb28633f92dd057bc5d3d5d23bde5125b348b9e3b31c97d09bdee12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4807 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b18e5e39a5429b6581b662603e2cdc68aa4bbf45ccd6bd7b57ab11e59e70b9a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-4501 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 036f5d88d253076aad18f9d87dc4e849029773159ccedf2c1ef7262a7f6bfb60 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-1406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 03eda098bfd8ff06bfbffb6c4597c551d64c94aa280d2746277f582d353a30b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-self-v22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 672d9ccd18153a9163f1f9a63ec5d765f412cf86a198d526fb04ecc5aa6eab3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in odn-static-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a49d8b382070675781a5628be927a75dfaa48ed927b0dbb4d39f49cde36bbc6c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in very-bad-npm-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b6aab39bd84cb65205f0339a8531e90906143bc204d65dab3f378e8ef83619d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in daftar-10-bandar-togel-singapore-terpercaya-agen-pay4d-terbesar-di-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c010afee8561b173cf2644e0cf79595bc1f4c292cf5d3c68a90de24f2a655cab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apidemo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f75d9b21d9cdb2946b01c0b9e4be982b14730680d4e167d11ad1402cf1c95ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zettle-bo/dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 510b4f65adcadc6cf06f1caf2a6a9f71e0b88b31e88b96d18de7dc241fdb9c70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-bucu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2908145aa0c6daa50e572b3120bf06a85fcc270fc0cdf0733af4bf1e624bf0da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fca-spbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a8ff7a08abab44b5a236e031340c492d901250c279d87f7078124850ecad03e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in as-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a907d0f630e8178cb7ba1215d44dac15d4d698d71e40733cb66932ff43419de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in proof-of-solvency-verification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c80842c791023b79222e82ae88ac91bc92a9941cf2a6b08c29042d98fa99363b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in catteleya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9c8f112541c7f415a060c136109b57be2b983aeab2087f5ac85e0b553baec75 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in becoming-the-narcissists-nightmare-how-to-devalue-and-discard-the-narcissist-while-supplying-yoursel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2208fd1d29f35f1fe83fe7c0a7a30f398ce914f799fed6a37b0e1eef3bf74dd2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tangoch/add-two (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db14ce679d7f0dd262266021768200a695a57df3a2609fb5b98bd03ebca95d3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...