Malicious code in gas-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b218a26d55f47d2b60f56267a03c299dbed364fe6393cd2f1230f364020bc79e [email protected] impersonates eth-gas-reporter author field set to cgewecke, source tree mirrored, README pivoted to generic 'multi-chain gas...

Malicious code in 3layerdipstackkpfva6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 630019d614a8c26a144f9502c87e0c4bc16d904adea23a7c202a1d8ba45632b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack7d0vc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0ec71b1f453c0b7e55711dad1fa36e9df70acb84f3730568936593cb146817f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackedqpy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58ba6727af48ece8c4931942d5c3e896e53d11e64fcd2328ca1a9ae65dba822a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackcfu35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 044b8051a8aca89d5eed9f4eb9202524d9c5555e6b4c9dca0fdb8061d5449839 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackoa1cxf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877fd9ffce526743f903c7a4a59e4477dd94ef332567d36351da5dc965ee0cdf The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstacktlt5o (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04ad82f993b57203b9ef92cb554fefce19a8a546384a7da3a2488aac91988cfb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackub7lk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 615a51cc9137b58bba3ed9211a5aadc958c9500e082d10f9c5784134cbbf0e17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackkl17i (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0eebc3695528bc0f65578c14bbc130de49dff7dc0cef6a6faa1eedac884e9fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackl3dhz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3862ed86112dcd3b48c89206416a95b9aa7682ab2c0efd53e6e1274bbd0724cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackch7e5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a24fc14dd21ae5f53d597e5cb5ca73550a0e576fd4a41098201dd7c4814e059 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackzhnxi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 651eed48f507679546a5f64754114510ce28cd2e6ff5b61759b8d2c0e33e4e4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack9riv6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3219007f88ea611b59f13d44f4dc5fea032b355916431ac597a02ba6abd9c4b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack5cwu1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2c440b4cdcdfcd5b237b8c1ca8f874e292c3cd46e9d718752f45b778d2b4c96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack4ib1jd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0911c1965ce4e90d0a160696bb4ef7a0b71efe7fac6c29f42fb97cb8d564ab The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack1ccrm9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a3be227db8cbc6173f4472a137d82782db598d478a81bcf20d3cedb100f5ef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackodswc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b02ec6378a22e759dcdcaa22a447de9b867ce90b41ab4e05b559b952805da4d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackjw2t3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7be43e476bf5c931001c113eb95dac898bd4c1bf48428de5f31a38fc3bb4ccde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack5vpco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d7f6e539028bc60b1b035b1f56a075db641a49fb092fbf7f1ee859210925e99 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackzpi9o (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1720cb26b23342c1b33bf794223358f70a283435be7840e0a24335e9ef2b7734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackoo1jd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8cff13cc70884293e7d0fa87cfb87acdaa15045b80bfbc5d931a3c9738567be7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackjgfism (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d88eb72e402d7524a8f312983f9fe9797af090ff007603d1a6517487e03b2f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackuyb1e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06374c8bb1ef6c0948f07ce85d7e9d47af36daa52c02cd4f7663ef5f277cc445 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack04tdo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a2002b2232ea0011c14986dddaf7f4b6137a943248bddb10fcd1b85275c61d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackplila (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e367240009d8da30f1a2df29c2e467497a8d67694dae4afe7b077bfcab8d0f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack6wih1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa5a08318698247887c6c57e5b4d9196461f5f3c507f5269102fcfe94631fdcd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackl21ibf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc6ccc6467814c4ddf095d64904d3b0d2f475dbcd599ddcf02f43329cbdbf49 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackeflbpd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aab44f42121801049410cf459680d1d7aa5571e61f0d96ad85852a6c4fcb6bb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackkirw0e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a3a4dcac52e8ca9c5e0ac1191470709d580905866ce1f9f484d26de7032c57 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstacke2eppx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcaf36dbd0707f61a8ce5eb550f2316479df9c6d1fb0855ad6aa55ae8ae884d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack7ezqzp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13dee41790090f5b150550812f382e8f870b61223f62d02f5c79f5218e5815f7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack9vcxi9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f58776216430f09975c1f3b1490eb904f7ca314f6e61e84113272ff0bd32883 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in desmos-graphing-d2xe9mki (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbeec1306190d160052a57776b8df3c00b2dfa95e6854caa31f727407344a05a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in desmos-graphing-0uw2z1ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a350af2f316c5638cb4fab142b90162fa9a50ded929a5b46b18c642a3f3a4f38 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-uhdrf7v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f58b067c3d6e63d5ac647c682c28315ac8435746925d7cde116c413b03a4f2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in secure-test-browser-fb1mhg79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d43f3f1928276445de21e37dbd2c2b036161c9b2350200bbc45009256521a2c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openai-pr-reviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3553acd3c5abc3f71b55740c4b06b2eb278f81bb678c55211f2287a498b60b61 The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working director...

Malicious code in multyproccess (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7938a109a642dfe8b161e9568d6373a038c3413c0fd1f2b01702f4f173348553 The package's setup.py overrides the install and develop cmdclass to base64-decode a bundled request/.payload file and launch it via...

Malicious code in 8-fetchsight-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e6a4c6ee9a60609bc1a9e9f1eccfa2166aaf106ba50c35d51aac34ecb3f549 index.js and index.html contain a top-level IIFE that fetches https://bitbucket.org/p2p-alt-public/p2p-emis/raw/main/GameWebSight, parses the respons...

Malicious code in totp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cebaa0a3370c12104ef2816420193171f431df0d113fdc5d8c9f1dc921deeb5 Package advertises itself as a TOTP utility but its postinstall script node./index.js --setup 2/dev/null || true and its exported validateSecret API...

Malicious code in requests-crypt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f971c743a8c6661c9078bdb6486843bb50831fadf9a9a6943e8231fac374ac2f requests-crypt wraps an HTTP client so that every JSON response passes through a DataProcessor that reads a configurable field default 'cos' from the...

Malicious code in scrambleeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb0e96b324df04d5ecaf0739dec60dcb2367a26def0e713519c51e24ee790df The package advertises a numeric shuffle utility but its sole public function scrambleeer opens a TCP socket to bax.h4x.tv on port 6363, dup2's the...

Malicious code in exam-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29cd95c1b59238861675a30a947648a2280420c11e53dcb4f8501db5cb736313 On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../public/logo.ico, DES-decrypt...

Malicious code in test-flow-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e7f0fbad80f9bdcba1c9d37322137d8f3a7bd86353650c5f946c73b1bb4637 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in test-flow-entire7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac2aa8c9e03f819fc35f4abe8554abf07333c68617df6a2f844d11bb3374594 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in eslint-config-consumerweb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b9280ed33a0aeb8f16341975f6565fec46a7f9aec171f690f5e6945e29ba637 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in emoji-prints-fancy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163576a0a8b626c88261c8cc54c5049d981015c80145ad36e2710fff5014afbe The package advertises itself as a colorized logger, but dist/index.js requires./logger, which at module load AES-256-CBC-decrypts a hardcoded...

Malicious code in log-res (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f23ea1c6c40021fb69210eba68cdbda94b42f4e255f78758778b90ebb09d78 index.js re-exports a desKey string sourced from apps/docs/app/theta.js, which reads apps/docs/app/des.db as UTF-8. des.db contains a heavily...

Malicious code in layer2-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd6521302fb3f49a8c444435a33834be40a420972df3a03cadb5fdb3176a68f index.js line 75 decodes a base64-encoded string via Buffer.from..., 'base64'.toString'utf8' and passes the result to an evaluator, executing hidden...

Malicious code in mutex-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c015af803d9d4adc7d0578dc27795ebaef48e6ce25e9bf715b54af1e4991999 The package is published under a name resembling the popular async-mutex library and, beyond advertised mutex functionality, contains a staged loader...