Malicious code in 1password-sdk-examples (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- Credit: OpenSSF source...

com.okta.sdk:okta-sdk-coverage (>=21.0.0, <=24.0.0), com.okta.sdk:okta-sdk-examples-quickstart (>=21.0.0, <=24.0.0) +5 more potentially affected by CVE-2025-66033 via com.okta.sdk:okta-sdk-api (>=21.0.0, <=24.0.0)

com.okta.sdk:okta-sdk-api MAVEN version =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =3.0.8, =3.0.8, =3.0.7, =3.0.8 Source cves: CVE-2025-66033 Source advisory: MEND:CVE-2025-66033...

com.okta.sdk:okta-sdk-coverage (>=21.0.0, <=24.0.0), com.okta.sdk:okta-sdk-examples-quickstart (>=21.0.0, <=24.0.0) +5 more potentially affected by CVE-2025-66033 via com.okta.sdk:okta-sdk-api (>=21.0.0, <=24.0.0)

com.okta.sdk:okta-sdk-api MAVEN version =21.0.0, =21.0.0, =21.0.0, =21.0.0, =21.0.0, =3.0.8, =3.0.8, =3.0.7, =3.0.8 Source cves: CVE-2025-66033 Source advisory: SNYK:JAVA-COMOKTASDK-14361681...

Malware in onyx-ssi-sdk-examples

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in 1password-sdk-examples (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain...

MAL-2025-327 Malicious code in 1password-sdk-exapmles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98366c77213b87d7622472828c95aa7590386458d140ad0a0b31a86afde5b6ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-254 Malicious code in uber-direct-js-sdk-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ee8294ed2bcf683f478b647f9919d6b45e0651905c29ada14a3ce392168447 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in uber-direct-js-sdk-examples

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...