MAL-2022-5315 Malicious code in pgovlicdntbzhskr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ec36765a04cf822dc49fae14e94138952c1e3e8da442a6e9de033cc5500d5a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4197 Malicious code in kmcwtjlfiaznysxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d95b82b634074fa8dc64e1863e5aba285b7b5838ce24a35a10b281b3f85dc3a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5537 Malicious code in qczwaksngjpbehxt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8dae403730c70d248e78d104cf07a2e3ddff86cc2aa6be9a85c2e60b55986fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bkmcjhroagplxsne (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ae88ab118672cde3a5bd798c768d4da5661ae382512e2ff5bd50dfed4ee75ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6948 Malicious code in vjlruxeiqtanmkoy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ed08a1eca2a64e747ba6c960f8f42992242e229a2e601a0470b422819a96c01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How Shady Code Commits Compromise the Security of the Open-Source Ecosystem

In this blog entry, we discuss how open-source code has been subjected to protest-driven code modifications by its maintainers or backers. We also provide an analysis of what these incidents could mean for the IT industry and the open source community...

Malicious code in npm_jithin_package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe6d3415e7a0c1e5adbb042b381add7fda870b487e95f01cf92f736d0af21578 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-487 Malicious code in @ovh-ui/oui-checkbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc446acbcde3cb8149a13344305559cde9a9acee013c00efa4096db154923897 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Visualization, Fuzzing, Exploit and Patch...

MAL-2022-2161 Malicious code in consideration-deploy-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6867f1ce691162d9df224e8f271a80e438a849bf446f5b16c3e05cbec738a830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3399 Malicious code in gme-loblawsinc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a31f28e5ef895958873aac1361d82fa772cef76b1813a7013a80a556e14dada3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6523 Malicious code in testingtesttencencent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0199243e90f6de89ef3f29f07bfb89203555e550773ddfa820ca5339a70bfa9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3571 Malicious code in hb-portal-xss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0615d1cc8db01d2d472fe12ad5cac1c8722a1fc4810b5635b9297a87c88e8193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3724 Malicious code in huobi-trading-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d29ecae36ab585836b991b6bbef49b053752417c2479bc2f7b6d086b2217b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6654 Malicious code in trip-tracker-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f808ac0021213099c19779b235aa26636e6fad306e1b69b20b69a3743ab82ed6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-144 Malicious code in @boosted-bounty/firebase-queue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15ca2bdb5a1428f6304b1f11c70817ec28f2d7ee836fd9dfcc1dee58d87d7a37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-953 Malicious code in amazon-ecr-data-replication-hub-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a32deab8300fe35db0ea930f79cccefb774d8da37e8bb3cd231a3658cd492189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5011 Malicious code in occl_core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59e532fda5c623f9fe59ab74543c46d0c4e8113f64aadc07e833577fbc499732 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4704 Malicious code in mqttoverwsprovider (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0bc89b8cc6de826e21bbd556d86fb09a9b4321cd9ba3e8ccb19a84d4b2822867 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5739 Malicious code in relayfbnetworkloggercontroller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2587fa823e59d1ae56400abf30dc8821ef707d7a7ae3311b2434725bec036145 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...