Malicious code in lime-web-component-interfaces (npm)

Source: checkmarx 94eb9bf47469857d8b3e3da68a34e320a0c7b1129a7b260fafe36dea5396cc0c Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis a6bfa977d2643486a81b788470c6fb71063ec868d37982d1e875a8b4e0bc4e7e The OpenSSF Package Analysi...

Malicious code in drop-events-on-property-plugin (npm)

Source: amazon-inspector 9ec0ea7d31f1e0fec815bf2b3893bc6e320c5c3e309b43d22130d5af8a52a033 The package drop-events-on-property-plugin was found to contain malicious code. Source: google-open-source-security 7491735851cc3c4e363b579ed9a0e6365134a2efa15061fb22c6fed56bb98332 This package was compromis...

Malicious code in docs-public-api (npm)

Source: checkmarx ef1db73ad9c5c4da2dd3bded796ac7c4f660ab81ff6fd5cd77f0452265d05d6f Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in digital-marketing-client (npm)

Source: checkmarx 902d44e21b6271e6b66059054f16d136d16fdc5172a47797fcfc9eda5a32fa05 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in developer_backup_test523 (npm)

Source: checkmarx a102fc358a2f397cc33b778fdc8edcca752c4a93e273f3e728d9e936ef75cbff Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in developer_backup_test529 (npm)

Source: checkmarx 6f73644ba1b18278f2efd5eded48ae6a21c8477dc4c6e8120676bdb356438687 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in developer_backup_test521 (npm)

Source: checkmarx 166bebecf34acabc1fdf3c66906bda21b7b7e7043f76cf728dd8637270162021 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in developer_backup_test532 (npm)

Source: checkmarx f05f5aa40e4c7abb13accb6085899f4b3fdf227cad5d43b4066b5a7d73717243 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in developer_backup_test524 (npm)

Source: checkmarx d66391b0bfaae30b4461ff1768362862ffcdeb67b1ceb87a4d9b18ec5af4b4a9 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in developer_backup_test528 (npm)

Source: checkmarx 97568f0e3334d6f7383a27c82a79b1e1be7654b988294006c30290011d105e55 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in dbp-polyfills (npm)

Source: checkmarx 4f59dcb33c6b979c2571b136278d2a4dbb77c122506b74f77ed0bc422fed824a Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in create-mcp-use-app (npm)

Source: amazon-inspector 2781601c3ba0c5d6d4b78bf322d88a4d189473e68d2382c171106342acacd271 The package create-mcp-use-app was found to contain malicious code. Source: google-open-source-security 718d4d0c5748f26d9c0e556f1914ad2b646ee3e9bec9cfdcb7222e201886ffee This package was compromised by the...

Malicious code in cptalertbox (npm)

Source: checkmarx 88c1f10ff1d7a9b89a479bd30b9548a7adc533c677f7913c88563b08e9d28814 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis 6335c6dc85309d9e802aa0989e277e329a7e87887f9ddba2aeb7db0ebc1772f2 The OpenSSF Package Analysi...

Malicious code in cherry_corrupt (npm)

Source: checkmarx c4217ff7a5cb8b7dda2ab6a4133d37db497cd1d418337326492b177b12853636 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in chegg-contentful (npm)

Source: checkmarx 0f294558304bba4da1c74169d026ebb78d4c1509bc734739942abe3860bc7390 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis b21e5b3cb40750e7ef67dd512238447bd3dfcd1c791d87c2ea89ea2b5efc34ae The OpenSSF Package Analysi...

Malicious code in awell-libs (npm)

Source: checkmarx f22989168c34b37227bb7bcfe0b03c27cd141f8ec26d34a78a0c0ba06553f881 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in @zapier/spectral-api-ruleset (npm)

Source: amazon-inspector d3f10a9695952f169fff0da94ca1ea47045d97dd486857aad5dbc7b608e2316b The package @zapier/spectral-api-ruleset was found to contain malicious code. Source: google-open-source-security c9470009eec3c58fcacc5893c6c90f0214677afa65cc44cb8ee8243766fdd0c8 This package was compromised...

Malicious code in @zapier/mcp-integration (npm)

Source: amazon-inspector 41b2f7745be8592869c863671add1d5a04c1d33f7a2c23a54fde611a5e021226 The package @zapier/mcp-integration was found to contain malicious code. Source: google-open-source-security e9d6f4a9178c13ce6f013df2191cd2531825c9e69a1262067f9530fe86ca4fa9 This package was compromised by t...

Malicious code in @zapier/ai-actions-react (npm)

Source: amazon-inspector 0711da4a6c6d0dbc599d757b367430a63ae51f6f4fb48b6758fb21ba718b0778 The package @zapier/ai-actions-react was found to contain malicious code. Source: google-open-source-security 1383a0732179c5eeceb51158230ef443e8bbaffbe23cca9276e2ac39c47af763 This package was compromised by...

Malicious code in tokocrytodev (npm)

Source: amazon-inspector 09fa98b6fd8313abbfeb250d10c12db28975f7bb12742f56dd5f1a3e1959d6d1 On require of index.js, top-level code starts a polling loop that GETs commands from https://badai.run.place/cekapppiapi.php?uid=, executes them via childprocess.exec, and POSTs AES-256-ECB-encrypted...