MAL-2022-3168 Malicious code in free-fortnite-skins-ios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61523a0ccae1970b341a274f0f7a18414047f4449a47bc3781628273d02d841b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2494 Malicious code in discord-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ba0201c8e576864383f2f620f6aa267bf062948995211e72ecb5d9f963bf5c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6928 Malicious code in view-function-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa389ba8927f7d9a97bb5a1f5c19c728ca474e224e6ed757c238a85baeeb99e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1285 Malicious code in azure-arm-servicemap-samples-js-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1dd215edcbb95c85a3270f0726976dfd8a8339412285b4b28c01275fdaf116f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4512 Malicious code in mbed-connector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 507fba4e1775a5f4e7f71be9c9c8e6f86ce9411d60798e9dac4fef8bb4c47685 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2680 Malicious code in eg-distances (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2aeb9259a60c97b6240a83817a9b26d16c3fc27740678ce87ac53ae3222a1fc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4684 Malicious code in mongo.rabbit.bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef04fad2f4cc89e04245dbb8e3687a649270fe37322fcdb204d24c2a54398277 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4056 Malicious code in js-access-token-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29f1084998eda8c1dc41acf9498dece23356295d341e62f57883b8f5be2125c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6332 Malicious code in stripe-identity-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5745048e2b6cbb598d400a01404828533cdfe3202554f269418b9a1b12205e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-703 Malicious code in @veracrypt/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0b7df8d8f5dc27d49f6c461d83c49bc3c06af2d66853045a56862953fa42ef5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3797 Malicious code in ikxtxeurxgismkw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880c0f8cf4ebf8ceb90a63d7b4437180c084a6e332acbcbe0b3133c937ee363c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4573 Malicious code in metamask-state-log-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74f2aa6b68c9e177ae4997861edb4ebefa1bcd766ce9db1651ed270d20908eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2910 Malicious code in example-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9acfa49bc966fabab653f30edda5447ca4129ec52665880e6e61b5a904a90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4310 Malicious code in link-bubble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb128541a44ae413e9579b66d3986606bf9d4ad01917af2e0c13473ebe3e02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6982 Malicious code in vso-splash-screen-terminals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a406d654e1a2ccf2bf08779d9dcf2f5c58ba3be8b211f2254a521995e7f8cdf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6980 Malicious code in vso-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb422332a19aeef03b4767503a00b97068dcb0b6f6119143f0060dae741b750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6067 Malicious code in sg-dome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100290dc9fe774ec3666aaf8b46114c588901ac78d03a51b506faa31a736ba58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2429 Malicious code in depedence-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc8878b8a028e2ab59027e85e1baf0c886fe76a9803d73594baff2df1359a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package in bowee

Version 1.8.4 of bowee contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...