Malicious code in auth0-logs-to-datadog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d200e2fbb21e126da8ae47ddbca7beebcc675121e65da3b2d699a7162f7c33b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in truelayer-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29c75990176d19762517dd4d6e52e6c8b1f434a2089b4bfc95fca56e7cd0a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in climate-tokenization-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6c54fe1dfe0ee0595094f7b5480bc0761286fb1ad1460e48b4eb6be7e274f52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in core-exchange-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25841b252b02710b4266777e5590f4848c43a4cef55f97355283e0db4fed64d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in launchpad-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e634713ebf6a8dfa6716324301d5ae77fb7e1081cc18e12d85dc9a2cce5d85a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pulumi-automation-sdk-ssh-tunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ffa176b4dcf4483a947e659d4d4855bd174744d67a8ed98dadb4ddd425e41ea6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1175 Malicious code in sg_personal_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6af0cb60de927dce01894374e1ee9541828c4fbef00917a909bbeed4275a817b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in type-fs-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d936b4b50723729f923e7728c1169f52f73b0fe7b8f064f29aa9d66ec0937054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1188 Malicious code in type-fs-extra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d936b4b50723729f923e7728c1169f52f73b0fe7b8f064f29aa9d66ec0937054 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sendinblue2019 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fea3b26c71619ef68e89535bb38484e7a23d967e7ec4c6b044b9e29d3a65ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hotmart (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 630908e08c08fe1b728bca7f4dc2b3bad96652d9083d958a6208bd3ea59f1a37 Any computer that has this package install...

Malicious code in is-number-ctf (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293adcb6e55e85876a036859d67bad46448785e1ef890c061977fb93cd4fe97a Any computer that has this package installed or running should be...

Malicious code in dummy-loosesight-gd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6b81116d25d562a22553f836d8de86b6e893c999b837eab90bafce90180f8dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mpl-token-metadata (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e20c7d93bbedc5a446405747356b754aec260f1716a86efbef222f15a52385e Any computer that has this package installed or running should be considered...

Malicious code in isctf16 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 236c481ceb4416a920a9cf23c72217913d688a6e2aa10edf1f633acecdaf131b Any computer that has this package installed or running should be...

Malicious code in nodejs-paypal-checkout-demo (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909c8505097e7b62c38bde6c75bb0ba8516f566136ec093b913944bcbdd1130e Any computer that has this package installed or running should be considered...

Malicious code in isctf17 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc935bae7f6f14d33043543fd5ea79225029b59cb212cb9e7336f98619afb98c Any computer that has this package installed or running should be...

Malicious code in browser-nextjs (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4a391b07d3a459e7dd200191edde3d936f11a865bcecc3ac54f1210b905ee6c Any computer that has this package installed or running should be considered...

Malicious code in isctf11 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c33f3136f471972ddafc623ece4be1fd82a54838cc113de8a230a98f02ecd94 Any computer that has this package installed or running should be...

Malicious code in isctf4 (npm)

The package opens up arbitrary backdoor port that allows bad actors to connect to. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9aa3ab73f09ab46f718934ee549dde163b232a5e7b76a90a95aab9dc738370a4 Any computer that has this package installed or running should be...