CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13

CVE-2023-29383 affecting package shadow-utils for versions less than 4.9-13. A patched version of the package is available...

Malicious code in common-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461213ab0829aa9518db4d8793b4a1fdfd4b3bd6971f9bbd126d558e4f96b953 Any computer that has this package installed or running should be considered...

MAL-2025-646 Malicious code in common-test-utils (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 461213ab0829aa9518db4d8793b4a1fdfd4b3bd6971f9bbd126d558e4f96b953 Any computer that has this package installed or running should be considered...

MAL-2025-625 Malicious code in grammyjs-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45f0349da339aac302d4c3bf992403e9bd539caa80f29576e448ccf3fb4af016 Any computer that has this package installed or...

Malicious code in grammyjs-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45f0349da339aac302d4c3bf992403e9bd539caa80f29576e448ccf3fb4af016 Any computer that has this package installed or...

MAL-2025-624 Malicious code in grammy-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 722622ea790d1aa9a24e9418f5f3480a09e5501b039fa8256d60bba00291e894 Any computer that has this package installed or...

Malicious code in telegramclient-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2807323f53c2562dc15aa9f4a559ede7c0e9dee713d30a637a4cf8f2c13f2640 Any computer that has this package installed or...

MAL-2025-630 Malicious code in telegramclient-utils (npm)

This package adds the attacker's public SSH key to the user's authorizedkeys file, creating a backdoor. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2807323f53c2562dc15aa9f4a559ede7c0e9dee713d30a637a4cf8f2c13f2640 Any computer that has this package installed or...

Advisory ROSA-SA-2025-2609

software: shadow-utils 4.10 WASP: ROSA-CHROME packageevrstring: shadow-utils-4.10-7 CVE-ID: CVE-2023-4641 BDU-ID: 2024-02776 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the shadow-utils package involves requesting a password twice and failing to clear the memory buffer. Exploitation of the...

Malicious code in upm-ci-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1beda914230d5e12471232662657b88c0d884ead109d0a6a01bfe5760051ce6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-543 Malicious code in lyft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcdf3711c3a60bf5a37d61a0b61ff485f47ea89580e09542881d51f6192ff73d The OpenSSF Package Analysis project identified 'lyft-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-519 Malicious code in linkedin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f45dd8de7c9dfbf4be3b1eb3b9ba6589946428e21d51e9d4da84804e129b9b5 The OpenSSF Package Analysis project identified 'linkedin-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in linkedin-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2f45dd8de7c9dfbf4be3b1eb3b9ba6589946428e21d51e9d4da84804e129b9b5 The OpenSSF Package Analysis project identified 'linkedin-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-508 Malicious code in instacart-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9148e4ef72801be1e6f194388e391e2788a1b821aaa108c28f4a832a833f9893 The OpenSSF Package Analysis project identified 'instacart-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-481 Malicious code in google-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e867afe3fa68230265b07bb6a6218770a62be2ff3a53c35395224bbb2b6be9c3 The OpenSSF Package Analysis project identified 'google-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in google-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e867afe3fa68230265b07bb6a6218770a62be2ff3a53c35395224bbb2b6be9c3 The OpenSSF Package Analysis project identified 'google-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2025-477 Malicious code in godaddy-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e3e78c314bba5e60254ba13cbb65a58a2d4c0f88a9ea6a5b62cde08027bd2bb The OpenSSF Package Analysis project identified 'godaddy-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in godaddy-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e3e78c314bba5e60254ba13cbb65a58a2d4c0f88a9ea6a5b62cde08027bd2bb The OpenSSF Package Analysis project identified 'godaddy-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in epicagames-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c33c517ccf715e4f610939332c3137b5abb5a7fbd5c82bac72bf051316389738 The OpenSSF Package Analysis project identified 'epicagames-utils' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...