MAL-2025-1314 Malicious code in bingx-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a5d8cdbe3e0f835d014b61ec4d6c06b7b62a9ac36231e8ff2488cd4ce4fbe0ca Any computer that has this package install...

Malicious code in gate-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0046474269613cb6d87e02edb5ec73480af91adb0db74829e2fe811fabd5eed1 Any computer that has this package install...

Malicious code in gate-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e5829c327248d41abf070c9c23598e436a2fefc55efc2986ff6ca1ba771ef61 Any computer that has this package install...

Malicious code in gate-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dc14e82a56806231e6081224934a67ef7c9498e2bdf40b67bf26319e05fb536 Any computer that has this package install...

MAL-2025-1305 Malicious code in gate-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dc14e82a56806231e6081224934a67ef7c9498e2bdf40b67bf26319e05fb536 Any computer that has this package install...

Malicious code in bitfinex-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 199489107476d243a7bba3fa9ea8aba37899410c24dce572a4a67b4c49aa9e1d Any computer that has this package install...

MAL-2025-1312 Malicious code in bitfinex-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d3b422cc62c2a37ce694ef5b18ec87c83c4458f5841c731f826b11c19f575bf6 Any computer that has this package install...

Malicious code in mexc (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1ab8e8fa6e2a60969584718143ce29d6022e75891c0cabb07e2caf8b5a0934e Any computer that has this package install...

Malicious code in mexc-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aab447e6786fd38bfbfa97d8806d9059980107ba328bfce7738f23b885923b02 Any computer that has this package install...

Malicious code in mexc-main (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b22d83fcc93875dbcefd9db5554e0bcab6c594802c953f58ce86d9abeee0838a Any computer that has this package install...

Malicious code in kucoin-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bc6d7a1ad2130468f00ff8d87225df98b3ed6bf45ca9bfb1a4abc0cb86895b3 Any computer that has this package install...

MAL-2025-1298 Malicious code in kucoin-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff7abb8b4fceb09af6648acb617fd1e6d2af1e967b19bd929df5b262faab7808 Any computer that has this package install...

MAL-2025-1295 Malicious code in kucoin-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5bc6d7a1ad2130468f00ff8d87225df98b3ed6bf45ca9bfb1a4abc0cb86895b3 Any computer that has this package install...

Malicious code in kraken-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6bd973c5cb350ae3d0073065c89090053475dbaa60a3513856ed9cf349e47b Any computer that has this package install...

Malicious code in kraken-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 538966bb30335d489eb80b6dad1c7b14ec9a71669fded6c77d31dcb84c13f3d0 Any computer that has this package install...

Malicious code in kraken-internal (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a66dbe19baabd7b0a714b71a5e3fa9751931aa4041cbe2cac848eb08ef5aeac Any computer that has this package install...

MAL-2025-1293 Malicious code in kraken-production (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc6bd973c5cb350ae3d0073065c89090053475dbaa60a3513856ed9cf349e47b Any computer that has this package install...

MAL-2025-1294 Malicious code in kraken-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61932b79fa7ada492a4bb1d3351e0d7f98b5b44d86ec407d8fc6fff3067cec00 Any computer that has this package install...

Malicious code in tokocrypto-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd84bf796800491cc17e73f69c0e77906f1f66f8c79b2de79967944c97df886 Any computer that has this package install...

Malicious code in tokocrypto-dev (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 33ba3b3f29ac7a1725f71e0b16ff23e83c034f61280c327bf92fc31ed4ee2d3a Any computer that has this package install...