Malicious code in vscode-gestalt (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b869acaad1d20750b0c435dea2d0a474208819d32ba8a1b00d42d57f850e65ed Any computer that has this package install...

Malicious code in muzeeglot (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a924cd903cd9ec3511c788b9d1b75874ed09f4786dcf83a141a6424a9dddfd86 Any computer that has this package install...

Malicious code in zqdl555 (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b18d98c2639c2052e5fcb38fd21e609aef6201aa3e78bda2cb13f15227c08a5e Any computer that has this package install...

Malicious code in cbpay-js (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ae77ff8389d6c4b04ac665b524c5b721d9792b77d2b2a7b8e3f4b6bdd9c58c0 Any computer that has this package install...

MAL-2024-12025 Malicious code in private-bug-bounty-secret (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a55444761df525e7428c98e6dd9a390a1cf5cfea4a7485f768da73a2067df6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12023 Malicious code in ppw (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f4bbfa2304b6d2aa4d244a2936bd5938aa3031f3d10bb23eb82631224020e55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11900 Malicious code in alifx-media-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8716d89d3543726f75604dccfd9a5ab777f48047bb3aa028cdc047c77d1b9dc6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11905 Malicious code in solara-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d6e86743114e65716ebcc22493a5d16e0e807c0701cf4233fac1c9eb47f821a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11908 Malicious code in windows-version-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 613ba7ede540f232f2e844b88d0e3dbdee0806c83dfbf4cf4bf4ca7a5430aa33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commitlint-config-marketing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a396bd7999449041603f8b1308e46dd3e47939209a438a8ce799dfa3e6406d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pupeteer-record (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c84f1706624205e21ef071dc91821f8d234138504f1458d980864e2dbfb38b81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ultimiort (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e30b4cd18603a8504184f2debf2ed2c8719cfa685f73c52091c5e453acafd1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/distinctio-a-doloremque (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e5eb578ed87430f02702424684db712aafe5999422bcbcfa4f644a75484e3ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/harum-nesciunt-dolores (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0a4ec64db17e0dd47d89722dc0d30cd003ed2c3c8336940cf7387df61827ea4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/voluptas-saepe-officia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be67c0c631b99905116afe7a6d117afd7cb088010c30c4c7c111a75052196d2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/provident-accusamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1add6a745f4be527bd396ad496b468c62373ae40cd7efb067e7f299367e77b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in resumecom-validations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb71bf1cb4ba925079e4cb0146386da6304565a1d20cdb7cba37959876f36320 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uitk-react-experimental-button-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 74d35a0704d9415d237418973ea82b6c991e02af5b2381fc696268805ff39a30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zitterorg/numquam-aliquam (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 806c81b326bd0ca1362259f495457807c5be7570acefcdfc7bdbfcc6d2b9ab9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @freetime/core-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6e1ddad8237b58e27d13a7761696892692fb82793f5f7a7bd900c6397d96dbb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...