233076 matches found
Malicious code in abuden220 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5db7640be1dad05b49efcd772335edd1d23af2473f60abc8104719377761f272 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in acidic (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef3583eb4d5b190d763cd784f5a40cb2cddaa8f1b6cd81b8a663bb612b51bb7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in abuden29 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bea5d30b04399b967b11ec631f4c69261a378c4c2fb07d8dbcae101927596ea The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in abuden24 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb51631494082c47eae9693ef57def77cbb5e4ecef742b0e1cf5ac6f41b4573f The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in imillegal1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b8bddd4b8345bfaacf5ad511276da43344de0033bc312123620aa6cc6e4366 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in sixseven5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff6db681456253158f47c4b36f5d7aa03089ec629cd7d0b0246a9ab6c871efa The package declares no install/postinstall/preinstall lifecycle scripts, and its declared main is sw.js — a browser ServiceWorker that uses...
Malicious code in thebigyahu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb60a0e719514988070d96c3cedea8d918edccef68203afe3cda86635c607de The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in backup4-gasp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e42991a6cdb40d2c1dec58317f280d0a6e38ad2dfa14b1a0dfe2ac40c5dc18a The package ships multiple heavily obfuscated JavaScript bundles under assets/ AccountPage, DarkVeil, GamesPage, PlusBlockedNote, SettingsPage that u...
Malicious code in @gt-test-exp/profiler-exp-00000011 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8469d200c782e7ca622ab45b8feea3d4f93ef1331508444276ac8dee60a3c66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gt-test-exp/profiler-exp-00000004 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91349d128e919bddbdd9b7bd7f82284163d6282d072040a816ae22e14401c363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gt-test-exp/profiler-exp-00000002 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc5884175c7dc809c1bbc5ffa179fb86fb84e07903ca747d62692257a7972fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in openai-apps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14c6aa9b0f0ab8c4eef077cf58971cd053092124a8d91cb2d478f04bc22ad4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dogfood-search (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee9ec99742993d16c0c4ef9257240a9841f876da2940bcfb6ceb77b0e51a02cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gleamkit/ws (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc9213fe9e786988b3fd882b571f03aeaa1487b8006badb837b4e804da66eee The package publishes under scope @gleamkit/ws while copying the ws package's description, homepage, repository, author, and README verbatim, and...
Malicious code in @vraksha/gh-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c867b4c68acc159dea1bbd580c5de3f3c9fef7bd1f54cd48a02c59631ffda12 On npm install, the package's postinstall hook runs index.js, which performs an HTTPS GET to https://http-logger-production.up.railway.app/payload,...
Malicious code in sim-apis-chatbot (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in shiphero-dashboard (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in serverless-twi-testing (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rxeactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rpeactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in roeactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rheactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in private-packages-sharing-sessionz (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in paypal-legal-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in nreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in notepad-monorepo (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mx-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in modustack (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mngularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lunkr (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in kreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in jreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ict-api-foundations (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fnnote-monorepo (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in express-denv (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-snowdusted-bauble-546 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-merry-snowflake-893 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-merry-hollyberry-699 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-marzipan-saddlebag-291 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-bright-workbench-558 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-extention-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-chain-test (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-as-informed (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bitu-core (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in axgularjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angxlarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in anguvarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angusarjs (npm)
--- -= Per source details. Do not edit below this line.=-...