MAL-2024-355 Malicious code in wlwz-2312-2005 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dede194e824987083bdcc223f15ac57d3a85166a7a6175b6214123f4a639a3f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-466 Malicious code in wlwz-2312-3208 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a00f55e04251a68db55fe00d96067343bddd4d39db80871a1fd8a2b485b308e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-175 Malicious code in wlwz-2311-6208 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697d158d5ab8fcf534374358bc3929b95bf31d131f987c186c073e2f081c9b59 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-169 Malicious code in wlwz-2311-1406 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2868e2d7dfc07ef1f7278406cd0a0eefc416b16e4615b55a00cb936707bf443 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-124 Malicious code in discordjs-selfbot-v33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab9def4d6bcdde4f96050240b45cb89ba4b716aec4b6cf2c3642c3dbc1b8417c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GitHub Rotates Keys After High-Severity Vulnerability Exposes Credentials

GitHub has revealed that it has rotated some keys in response to a security vulnerability that could be potentially exploited to gain access to credentials within a production container. The Microsoft-owned subsidiary said it was made aware of the problem on December 26, 2023, and that it address...

MAL-2024-113 Malicious code in child-proces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c848180a34155de4ca426e1b0fb5f5d6438c46d1f8c55e8af1a6ddd2bd50078b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-76 Malicious code in moduleprefix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b8ccf45d6112ffe2cda7ee8d84eb2cff1e7edd570d107b772633d432a630fda Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-73 Malicious code in gh-action-send-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4f6d4e13a5a1a14537f878bfa2d4490b5606649326d77d4b88e205a010f124b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-69 Malicious code in automation.samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a774b4130cbf36652fae63dee86aee2c0c60eeb25dd5be05dbe22c5a2dc1eab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-49 Malicious code in vg-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d995efbd124e2109bc610be152ba4a331cb7d256d3a70d5df78498e416cffbc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-42 Malicious code in error-can-not-resolve-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44848c297338de1e97a9c4d961ba8f2441f2464713bd36229bf5c0fb7509455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8773 Malicious code in holland (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7126f7b736ad37c767545428db7c071735738d8ae229e34b18808054f175e6ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8754 Malicious code in discord.js-selfbot-dmallfriend-v13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2862e33768120b0d69a6831c644ace7f6b507c1437f5200c7169f568077ec72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8752 Malicious code in discord.js-self-v21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7ff51b0a254299fbcba44e692ad912d759a48d835ffcb10759424392b1debdd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8739 Malicious code in hackathon-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c2b5db7a78bdce1245f6a6eac22c3251fa6bde8775c352c70a7a7c3f1d16bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8720 Malicious code in hpulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8e05ef1449de96d2983cf58d8db74565a1a331c63044ce1c166505af88b7409 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8719 Malicious code in figma-include-accessibility-annotations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcb17fd8a376f1c1967e4a54049e96bf34f63f71f41e75262db53f96e883d43d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8709 Malicious code in paalni (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80fe310fa14b18a156e781ff55555ecf5c96db6a03102615f4a93d8e961db75a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8707 Malicious code in arrays-string (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 058ca280756e331336b85903607b74f86355c7e7d889a956dc9a904f6e2c5485 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...