MAL-2022-6332 Malicious code in stripe-identity-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5745048e2b6cbb598d400a01404828533cdfe3202554f269418b9a1b12205e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-703 Malicious code in @veracrypt/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0b7df8d8f5dc27d49f6c461d83c49bc3c06af2d66853045a56862953fa42ef5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3797 Malicious code in ikxtxeurxgismkw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 880c0f8cf4ebf8ceb90a63d7b4437180c084a6e332acbcbe0b3133c937ee363c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2910 Malicious code in example-google-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa9acfa49bc966fabab653f30edda5447ca4129ec52665880e6e61b5a904a90a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4573 Malicious code in metamask-state-log-explorer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74f2aa6b68c9e177ae4997861edb4ebefa1bcd766ce9db1651ed270d20908eb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4310 Malicious code in link-bubble (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb128541a44ae413e9579b66d3986606bf9d4ad01917af2e0c13473ebe3e02b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6982 Malicious code in vso-splash-screen-terminals (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a406d654e1a2ccf2bf08779d9dcf2f5c58ba3be8b211f2254a521995e7f8cdf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6980 Malicious code in vso-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb422332a19aeef03b4767503a00b97068dcb0b6f6119143f0060dae741b750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6067 Malicious code in sg-dome (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 100290dc9fe774ec3666aaf8b46114c588901ac78d03a51b506faa31a736ba58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2429 Malicious code in depedence-confusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc8878b8a028e2ab59027e85e1baf0c886fe76a9803d73594baff2df1359a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package in bowee

Version 1.8.4 of bowee contained malicious code as a preinstall script. The package downloaded a file from a remote server, executed it and opened a backdoor. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...