Malicious code in telegramclient-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2807323f53c2562dc15aa9f4a559ede7c0e9dee713d30a637a4cf8f2c13f2640 Any computer that has this package installed or...

MAL-2025-630 Malicious code in telegramclient-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2807323f53c2562dc15aa9f4a559ede7c0e9dee713d30a637a4cf8f2c13f2640 Any computer that has this package installed or...

Advisory ROSA-SA-2025-2609

software: shadow-utils 4.10 WASP: ROSA-CHROME packageevrstring: shadow-utils-4.10-7 CVE-ID: CVE-2023-4641 BDU-ID: 2024-02776 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the shadow-utils package involves requesting a password twice and failing to clear the memory buffer. Exploitation of the...

Malicious code in upm-ci-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1beda914230d5e12471232662657b88c0d884ead109d0a6a01bfe5760051ce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-543 Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-519 Malicious code in linkedin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f45dd8de7c9dfbf4be3b1eb3b9ba6589946428e21d51e9d4da84804e129b9b5 The OpenSSF Package Analysis project identified 'linkedin-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f45dd8de7c9dfbf4be3b1eb3b9ba6589946428e21d51e9d4da84804e129b9b5 The OpenSSF Package Analysis project identified 'linkedin-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-508 Malicious code in instacart-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9148e4ef72801be1e6f194388e391e2788a1b821aaa108c28f4a832a833f9893 The OpenSSF Package Analysis project identified 'instacart-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-481 Malicious code in google-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e867afe3fa68230265b07bb6a6218770a62be2ff3a53c35395224bbb2b6be9c3 The OpenSSF Package Analysis project identified 'google-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in google-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e867afe3fa68230265b07bb6a6218770a62be2ff3a53c35395224bbb2b6be9c3 The OpenSSF Package Analysis project identified 'google-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-477 Malicious code in godaddy-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e3e78c314bba5e60254ba13cbb65a58a2d4c0f88a9ea6a5b62cde08027bd2bb The OpenSSF Package Analysis project identified 'godaddy-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e3e78c314bba5e60254ba13cbb65a58a2d4c0f88a9ea6a5b62cde08027bd2bb The OpenSSF Package Analysis project identified 'godaddy-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c33c517ccf715e4f610939332c3137b5abb5a7fbd5c82bac72bf051316389738 The OpenSSF Package Analysis project identified 'epicagames-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-455 Malicious code in epicagames-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c33c517ccf715e4f610939332c3137b5abb5a7fbd5c82bac72bf051316389738 The OpenSSF Package Analysis project identified 'epicagames-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in dropbox-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9caae36a2824571fd25ea7bbd865ce6077410002b5011e825d2877095d171a40 The OpenSSF Package Analysis project identified 'dropbox-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-441 Malicious code in dropbox-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9caae36a2824571fd25ea7bbd865ce6077410002b5011e825d2877095d171a40 The OpenSSF Package Analysis project identified 'dropbox-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bookingcom-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis daa10c6e26b36376e95bf32b05ebdc3b9ae021c1c41f944998eea0ee08e626e5 The OpenSSF Package Analysis project identified 'bookingcom-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in arcus-cmd-utils (npm)

This package executes a base64-encoded script to download an Electron-based infostealer binary, aimed at exfiltrating cryptocurrency wallets, credentials, and other sensitive data. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

MAL-2025-360 Malicious code in arcus-cmd-utils (npm)

This package executes a base64-encoded script to download an Electron-based infostealer binary, aimed at exfiltrating cryptocurrency wallets, credentials, and other sensitive data. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...