Malicious code in simple-date-formatter-new-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 037638085662ef2cec04655349a528b60480aa642606d96eba158e62161b3a51 The OpenSSF Package Analysis project identified 'simple-date-formatter-new-1' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in simple-date-formatter-util-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0eb3042c51ca3c377dd9f4e814a53f4901a805271896f9bfd1619891be4bff5c The OpenSSF Package Analysis project identified 'simple-date-formatter-util-5' @ 1.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in tailwind-anim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 204592221540d7404642fb39488b1b235cf9f21b372558c196b404b48f3d7c23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in list-issue-predecessor-dependencies-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f74d699bfc5fcf83c6f2864f93ecd41d3d9f8613f45f6bfb3b6dd5eeb7a880e The OpenSSF Package Analysis project identified 'list-issue-predecessor-dependencies-block' @ 99.0.0 npm as malicious. It is considered maliciou...

Malicious code in tailwindcss-anim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2952f4dabc751cf85689160b2079f073f999b801ce9d59f08d417af7775232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-date-formatter-util-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2619c38c0a6e4c2bf346194ff3de102d18ef08ddd7c864c4470d17d62837b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-date-formatter-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 331277f77984c01034871b322154a0430093a1a087c2e3b48d18a4cd1c7254ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-date-formatter-util-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71be7a588ae717e33fc9fe98c246a1037e8a38d385a18104a5c0fe8ff1f659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trongriden (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfb2a16e0023940b622e66acf21c1597d4127d94fb730610f509960e49754c3f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in wacve-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 de96a68d25555c9ee1792a22b84307ba3bc68d1e012bd841454dc775986260cb The package contains encrypted code with infostealers targeting Linux and Android execution under Termux. The encrypted code collects files, browsers data, tex...

Malicious code in @custombots/custombot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07c87d7c1e7e788959af6de895c76293fd0922dd1a422da325962de7f8d3d19a The OpenSSF Package Analysis project identified '@custombots/custombot' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in pp-react-worldready (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a0cb104ba7e29ae2e20cb4d191f5a1cb0a74de3a26cc06e9e6369d5bbee94e5 The OpenSSF Package Analysis project identified 'pp-react-worldready' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in nvtorch-oot-nightly (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0f81b904b849df393cbe5c34f952af65d8b28e0797e33d62cf964df77d4929c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in trtllm-subdir-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e8cdbb30c1c2ddf88a76d18b935d4accf68155f936b5df59a8864fafd7f4e06f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in test-dev-boot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cb67b63654219a5c04c8be6821fe3faad301c009b20e558f3a17aab0b85ef97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-host (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27cded0e4f6f17de980e65abefd0ed8b4a24a7f817e8a8506492d4ed87d5ab82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5052acf8653a95208115bcc91200c36bb581aa75d1b6d27b3f2a0ec7a6a80de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-watch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db85a6a548238053a85ec4851a41b50b3e501d57ac56043fed21d711c1110b4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-dispatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de211ea2269bf67da36abb6fcfe56f92c6d377246a30c7c1c878ba746a26e65d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 753c40af198c777d7248e2e3f9c4df1ffdb26e7acecb35a05c76c38dfc07bc74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d84ffac131c96846518a7d31bd752bf3e3f87cad1e79383458b24f489d0140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ff9d18c9f39aa3d29180ab72b815c93f9bdd7c9b22a0ff0dfd255bdf1319eb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @moxfive-llc/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4880022b8afb155703691d80f8558c09be4262e4fa12064a2faca2607a3679b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @spending-behavior-ui/widget-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36bbaed8e8bd830b00f14eaeb532fbeeb0d581a806dbdbca220ab006b1adc958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @spending-behavior-ui/cashflow-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4297e338304a9686d295320c60149b746f9044b0cc158fc6743c670965f595fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fuji-web-components/maps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5e567a52783d2e684e1da23e3d5804652801f44f643834fcb30cea6bbab732 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @global-theme/context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48962d911b70fd09f4c001b44b879452dda607f877256d2f85d64538912ab7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mplay-frontend-ui/link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f2d06b568af724d0c5db157ecd8894e51acca5e9f1ae3d965ca5775afe852e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sw-commons-components/message-upsell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee504d58bc907a09044cba70345cf7bc8cf2266c20833ce8bae2866b205208c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nordic-dev/linting-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0054a3ea54efe5ff365eb71e92db7d2cb4e92a63854489c148660a82d083c16d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @one-chat/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c7db3f85373ec3f62997e6019402e390ab07d37ef0f129fdfa168b9503da7e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @finance-ui/finance-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b752ae2cd0e6a1f9faf2b0c3376aa390e9708b86705621087e72e95de4333448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sof-assistant-fe-lib/vertical-faqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d1ba538ee75936802bcb54b49dd258a1941bf7b9f07bc0b05db81fd656c47e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mplay-core-lib/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eddb6f3032b394543236ca6a9378654e0d657ae7c80790126b90be036019607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @meli-testing/jest-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a676fda55082dfbd3f6cb792419d9e7156f49a8c587526a37edf9cb09f535d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mp-op-ss-front-lib/tracks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d870b0214c38734a6a9b3073e958bb198a11243a3093110cc85be0b7ae9bdb2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cr-invested-ui-components/chart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c6439b3541927d90da8118ef84eda4e7bedf70c59293c1dc695bb2219135cfa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @finance-ui/snackbar-ifpe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 44977ea381cb1ef71bae69849b3091ee76769ad26363ba31525f96ca1128bda7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metrics-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9f8558ac68be73ce64768cc451fbc5236c26db9f555c7c86a687c253a2bb7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in telerape (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 21e8fc4f3dd969ec103ff1cb8a5bdba0d465bffffabe2615bc38d8e00606cffa Package places a reverse shell in the PTH file. In analyzed versions, the target was on localhost. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in refbase-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 315ac36b49a01221dde71396930996c607eeef7737c9d2dafae5bdc8daf09f58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hit-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dce1db42ec3c0d5758c442c943859f877d4cc877644cc4116df2678ab8b0527 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in allurectl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 81cc68a7fe1c39ad33325aeb049148b1165f9d8d85c14329094de9912305e325 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mcp-server-boilerplate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51e3c940b9fc50ad864429da89bf924d2bd1c0253ac8bde66b0b82643260eb51 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iwomm-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d6809ceef0debeef4bcdc1bc305ec5066eceb56a9ad6a17268e0edf87c919b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in community-published (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1017256693a94381e0b07af053580670a0cd8b3e5868954aba49474d32cd8c18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paraglide-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 311880366b1380bc5c79df504252810120f8ca8cdd0e64c9ff0001e080da34e3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chaos-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9f921c394df64d1bceae64ceeb12704fa1a6bec8e502a93507aae663647af05e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gtm-mcp-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49a563cc12f897dc708236d0098fa2cedfeb15e249d23879b5c0e279e353604c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-remotion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f64eaf9a8b1571d5e5800922eededf88e925355ce9fa4d61c60d8b8c302401b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...