MAL-2022-1611 Malicious code in blockchain-classic-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c000c341f611720d733afdd0b5e7047b7d04edbe07d873702ca63594a9d60b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2251 Malicious code in crypto-com-chain-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 437033f64c41a907ed403850561929fa9e944f2b536a5087c92a76a6bfec6a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4904 Malicious code in nodejs-driver (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c4ceaf6a066fdce9ab350306c61d927c0ca99cc7d77b8eefe29c778fdfd8758 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1668 Malicious code in brave-chromium-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d79eeeb9331ecccff7119c01e7502067dbecc674a2d97d5168e7aba1d126925d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5251 Malicious code in paytm-kafka-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edfa4dabe018178d0903a28e13409a37b657b204270e6036afb5d22488e428a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3009 Malicious code in ferris-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d39e6c2f612ba9f7a57f24e5c9f3bc6ebfb7bb77ff6cecfcec29132853cde13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6723 Malicious code in ual-reactjs-renderer-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51f103cbd42e4c8208e6cc75f422cc09ce4766ad160032a8fbd7529826851757 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3749 Malicious code in icepond (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 717713a20a3cf53fe853301155dd49fc42af2614f835f8c61192e0bb3bf49c3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2307 Malicious code in d2l-rubric (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551223fd7a2d9e356d5db1df39fab3d2dfe82a4c86215c43bdfea16345cb42d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2381 Malicious code in ddd-demo3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2eac035e89513982d440328e69c5d811c0540172b7b17a393a37b67685b57784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-503 Malicious code in @pixiv-vroid-hub/vroid-hub-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 643ea88d758e2e4fb1075356094d349c0e431e12fc3202f9d6a7c9d88d7645cb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-352 Malicious code in @image-process-library/blob-to-base64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d97f201a6169602b9dcfdcb3be126c7d1f1a71e3aa1dab3330d18f7437f199f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4296 Malicious code in lib-admin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5698b187e32735c01b7b4cd91b98099a130910341c1c82b96030b5256eadaf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6210 Malicious code in some-crazy-dep-that-doesnt-exist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bba7898448e8d4f73d570414401ad6087f1975f5929f72e38815a6bf95c28103 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5434 Malicious code in pp-react-buttons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 000ff8cda66b7a099f0780508fa3aa26f9c586ea54c2ec040c448b46ba5e8a97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5577 Malicious code in rainbow-bridge-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c77a9d522ecbb7447f430c4592aa064aa157816d39b65c4da941b07d2b2da05 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6524 Malicious code in testingx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ec41ceb63dd221afb9f167fecc39fe14258dbd4020d0e62d7f7df94062c2679b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package in arsenic-tabasco-cyborg-peanut-butter

All versions of arsenic-tabasco-cyborg-peanut-butter contain malicious code. The package downloads and runs a script that opens a reverse shell in the system. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malicious Package in cage-js

All versions of cage-js contains malicious code. The malware downloads and runs a script from a remote server as a postinstall script. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should...