3 matches found
Malicious code in simple-date-formatter-util-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2102f256bd17b2a80b2157371bee5a3cc1d9c49484aaef694a094218c2a7bac The package.json postinstall script runs on every npm install and uses curl to probe cloud instance-metadata services AWS 169.254.169.254, Alibaba...
Malicious code in yxt-fe-center (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eefdd1eb0ce0a6fc7fac81b2bf725420903465a02f853bddcce53bb22c9463ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in superset-cypress (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fc7141b3b668363f8f3073951d4253466c6ff87bd1212f3e6a7ac19609a5003 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...