Malicious code in sophs-test-package-test5 (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in com.adjust.test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1c1175d9d178e089d813fa5fd10a1f34409c94f28af0ef4c4b0aa7d2424c77b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-test002-datetime-momo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a688643a119539cf494c667fdedfeb4b5373651b0296fe8252d54d72bd7e30b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2792 Malicious code in bugbounty208-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5012a09f4c2283a7df00a99f643af1a87adbef671a39e6569188a3bcdced87e8 The OpenSSF Package Analysis project identified 'bugbounty208-test-package' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in bugbounty208-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5012a09f4c2283a7df00a99f643af1a87adbef671a39e6569188a3bcdced87e8 The OpenSSF Package Analysis project identified 'bugbounty208-test-package' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2025-2350 Malicious code in @od-react/od-react-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af2013a6f5bf71bb192bd9c077faf94f1b589b3fa4ca56d2f9038983e8fa35bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2136 Malicious code in upbit-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19217085baa190b98f6d754353d6b47209e74bdd093ab4e508ebc6f0fbd72e76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in latoken-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f4deb1d0e6195e2e52b15c4809decbc35fba20798ba8ab501f3d8558296562d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wdpr-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa07fe623ed4f4dd2faf6053e7bdf936f13e8e3ee0dd7ffcc9af37cc778eef8c The OpenSSF Package Analysis project identified 'wdpr-test-package' @ 999.999.999 npm as malicious. It is considered malicious because: - The...

MAL-2025-1398 Malicious code in bitstamp-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 290131c8a4a16e54609d441ddef80033e6014ecd83f8d00a424f11b668329865 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1419 Malicious code in htx-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af8cfe522f6a03c75b9bf02f62bb022b2930607b810b33a905d16a26d2991c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in htx-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7af8cfe522f6a03c75b9bf02f62bb022b2930607b810b33a905d16a26d2991c2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1423 Malicious code in kcex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ea7892733069986cb86b8c583398828b93f34a8009708be71742bc26402c753 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pionex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fdba857c815f2790dc98795d90b7549921706c69ae2d250aedff3f22eae169c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1407 Malicious code in coinw-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c0c6baa45c1fd069597025a6670638c1d4bff2a901b784e80e27896ce62b2fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1428 Malicious code in orangex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75dcd0936faaa1ade20abad6c214921354886d0070329789e51d75e0a82c48f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orangex-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d75dcd0936faaa1ade20abad6c214921354886d0070329789e51d75e0a82c48f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1403 Malicious code in coinstore-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 553286be2ea7bb7f27b08ebdb284151c0bfe872a19d1b99a0714ad486160b6c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1358 Malicious code in uzx-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b16788177d4ca8abd5a2034d36a92b7a3dc73c13e702d5d52ffaab3ada9c0cd Any computer that has this package install...

Malicious code in uzx-test (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b16788177d4ca8abd5a2034d36a92b7a3dc73c13e702d5d52ffaab3ada9c0cd Any computer that has this package install...