Malicious code in borsh-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed0e447cd98b9470a197c1dd9b341e6a93ea6f39088f4f93335979827f707b8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackt3wr5f (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4a05b3c271fb16cbc32b977d3ec79f995e775a5c1a3d1583387784a8d8e2ef The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackev4sn5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17ef62f686ec1ac60f240ece02aa6d2518e472ae1d59f9b760e783cdcfa48ee The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackcyqc7o (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2dac81f6b14c5ca28b7efb9aaaf366235cc732f031f8b2900f32b285519fc1f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack2pdlo4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 638e723511590669eefd908d7c0ae0c5cfae12a68a2599986d8aa853f09006c7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackfywqmz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee0944700e8c39b5f5fbb125caf69265d316217a2edd6163e038a0c895951d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackl52afz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc19f591ccfb749d65cefcaebd3e42ed6f60920bd2318c21ba12450fe8ed3162 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackvm4qaj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6e39552490caa86382e4eddf3e0162d1f120ee4d6accee7e2c750a16a114ce The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackr5ga2v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ce455e7a19e84189c13631dc62f53159d44c67920b1579ab3feb779614bcb6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackuyd45d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b49a0c197bc8d1d72c142586ce6a7b4c6a6694574fb33ced9f7a770f046bae The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackebunld (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f35c1ab7d5caca68709f53e4437e5bbdf3a77fb308628c4517a0798c04fa508 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackqokw95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645ec019e6e3a7c3f46ec5537e4713ad47775817a68d0c30445ed103ca91a53b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackmokfkh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da015575c29fe6af032ba0c966d1adcdab17b367ca32bfb54fb11bbcfa4d890c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackdanp80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7ad51aca2a1256c94902657616735d1f145c72f449b0beadf0fd3f3ccd6fd1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackhyazlk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6790afda3bc2af3e8b5fbb3e3636c02767986b5f7b7bd3b7bc25585c6139d19 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackoms1fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c97713fb02abd28ed8ae39bdff7b71df1f21f6e8f835baf5f074bbe05984808 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackkdz8gp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368b8b3b78737f70c40d63c50e4b3781efe89e947013fd02af154faeca9c7ef0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstacksokbgx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ad075d1a655281192b7781f141dc0531a42e005677b48b170b5d8db829a0c6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackelcuhp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb13b3a8a98b196d368a547d115510504e1a70d7d0235125cee48cc81dbef936 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackolosqh (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a4f942b352834f4f09c04a8cdd6f51090279709a01f209d38bc8e7cb731ab27 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackpmrxi4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad393deb6e86fe83b0601a3461ebfdecdb15c00cb4568c83d957cb875e9c224 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackewhns5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f00b2c01ef5367885bc8ac69bb2561132093167e60716b2a771d86a4d748a2f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack9b0cq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43021d3e549acc8625e5534b6baab9e2072c89f15a84d98224cf8b5e0d80a111 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack8yfoyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dd84ecfadffe762f801df8835edd82d85918ddc082406e3ace09dffa3dc0a8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack1g5cxo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed95dd89d1a5daf491b1350b3cd65fb73e19a50ef66848b5a86ffdba77ba6205 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackp6m8ir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4875c48bc13fde1d2d33629e1518c300633d60ba1aeacdd809694a797ff48942 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackr4geh2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891c5a747b9dc19de051f0ec96ce08f8a791df5f166a338aae679f6da97a329 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in stillm4ddpocs-demo-gadget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff42d765d0c2f6af53e4be5a9cf26ef34b3a36accf199acfb7d53af40b8dc2a6 On npm install, the declared preinstall script runs index.js, which collects the installer's hostname, OS username, home directory, cwd INITCWD of th...

Malicious code in @next-fonts/font (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e536e77176d5fb4637105c50280763e82a6a273dd7de35bb82da340b0f71163 @next-fonts/font is a typosquat of Next.js's @next/font. Its exported Inter function mimicking next/font/google decodes a base64 blob via atob, then...

Malicious code in create-react-app-text (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7f200b99d8d2fadc13b72ccdd272107db79b8bc517ef5346a354479a177dff The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in ai-texts-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a340348046b89bf8c446a31a4f48233ec4e0bc412f531db713f54f35c6ea922c [email protected] declares a single runtime dependency, 'ai-texts', shipped as a bundledDependency inside the tarball. That bundled module present...

Malicious code in ranux-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dde928a7de2064f13b18847a56607605bd33f1331a57bb0be0ccf585fa5d86f package.json declares the dependency @whiskeysockets/baileys but resolves it from github:rcedubot/X instead of the npm registry. Installing ranux-dev...

Malicious code in dxr-dos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bad9a4bf59f5c59d899f7be2c655adaba56f8ce65f284519d9778ea1bcaff1f bin/dxr.js unconditionally requires the external npm package 'deathoffather-project' pinned to the mutable 'latest' tag and immediately invokes an...

Malicious code in system-performance-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f382b23398f0b2550e29a61c444b8dbd45796d20c938dead6ada9d967d82cabc Package advertises itself as a system performance monitoring helper, but its package.json declares a postinstall hook node install.js that opens a TC...

Malicious code in core-js-gns (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5eadad92952db436b03dd9673b34d203d9296b0913389de2aa0d9fef441631 The package's postinstall hook package.json → node init.js runs an installer-side dropper. init.js gates on developer-machine heuristics presence of...

Malicious code in alphazone (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fd365bfb46c45371bec3fb53e2e37be369a42ac12a10b3c8ca6ffec7dc604bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloud-agen-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e57cfebf30bc4f71b96f08b04b1d0b7a0af0a7f32d11033a2c186e7692333e notify.js exports send, sendFile, sendPhoto, and log helpers that POST caller-supplied content to api.telegram.org using a hardcoded bot token and a...

Malicious code in autoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 43e2f80495807b8e77521a7d5bcba68a0ba790db0ca08a3d14450f568165217d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cdnshell/loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b572368b522527a308a0a8057b3b0945ded5c73f4dcad6ab738eaa2b7ddf6e3 Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 03payloads/ stager, kbridge,...

Malicious code in datefmt-simple-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7edc0c1f9cc25265504ab10c2634c3ea17e4028ff8412d4d7f4b22c41c33c3c9 datefmt-simple-utils presents itself as a date-formatting utility, but its package.json declares scripts.postinstall="node postinstall.js", which fir...

Malicious code in alelo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1fd03e0ca4d5452b6a5d6aa2880a9c711021e287eaae056e68f70f6aedc926 On npm install, preinstall.js collects hostname, username, platform, cwd and the full process.env and POSTs the JSON body to...

Malicious code in alelo-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5aceecfb22fd66b4e0861399aa6864ba19a983f3483294dd0740e7e24d1c34 On npm install, preinstall.js collects hostname, username, platform, cwd, and the full process.env and POSTs the payload over HTTPS with TLS...

Malicious code in wct-st (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3065a54d66ae4872334224443453c85f98c9ab8ae9d87df215bb51a5ba5e7595 On npm install, the package's postinstall lifecycle script collects installer host identifiers hostname, platform, architecture, Node.js version,...

Malicious code in eslint-generate-prerelease (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b3f1a7acd55a1642c9615fe72871781a6c0d6bea6f9d31aa42c700aa799704 Package ships an empty module index.js = 'module.exports = ;' under a name that resembles internal tooling, published at an inflated version 99.9.1 —...

Malicious code in functions-framework-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4c9e327ae7e806fc6d270807180963349c0b7578b69f31336780d87323fdafa Package functions-framework-nodejs is a typosquat of Google's @google-cloud/functions-framework. Its package.json declares postinstall: node...

Malicious code in fmt-util-k7x2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e8613ffc5393a31685344c247925a5ef104f7daf3f0d2f45a51918adba7d344 [email protected] advertises itself as a trivial string-formatting utility index.js exports two-line pad/trim helpers, but its package.json declare...

Malicious code in @opezneppelin/contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abe04ec28ed56cb0a253131129df8078d425f8a0c579c439ced9c75b6977a6ab @opezneppelin/contracts is a typosquat of @openzeppelin/contracts. Its postinstall lifecycle script scripts/postinstall.js hex-escapes all module...

Malicious code in index-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46741db74596587c4d689ad282865566173c18913e95bacac258d20ac71da8cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in async-lock-queue (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52be48d53705002a2d81113d8da53da3c51a2a9de3f423b24549c6c89afdffb8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @years18/n8n-nodes-utils-helper-e (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d70df151b0a3f6d74618b466c9d7ac91e18389b38a805e2010b55202b5722330 On npm install, this package auto-runs callback.js via a postinstall hook and repeats the same behavior in index.js on require. The script shells out...