237284 matches found
Malicious code in kirkland (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4fbd3da78615dc607bb287e809874ccce081e816a5eeb1120421118da70bcba5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in midnightrush (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94313bf7eca9c82a6e6e6d8f3a7230fcdf936da5ff66069639e1957b4a8d2fe3 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in openai-apps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b14c6aa9b0f0ab8c4eef077cf58971cd053092124a8d91cb2d478f04bc22ad4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @espn-ping/react-dmed-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0467ac62043cf22dd249a99ff1279646dc599702140998ff5b86c79645364 @espn-ping/[email protected] declares a preinstall lifecycle script node index.js /dev/null 2&1 that automatically executes on npm install...
Malicious code in vuln-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8bd105bf3b12062f312b41f2a1eead5e8481f8d3749fc78bc79ed8675c11394 On npm install, the package's preinstall script triggers a DNS lookup to a unique subdomain of oast.fun fabekzbnjtufpffkzzmvjvi5eafhny3ok.oast.fun, a...
Malicious code in uncaxss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acda9720ae54881219c0fbcee73795be85877d292aa62662f7cb6b92e775f608 Package ships an obfuscated dist/index.js that is invoked from the postinstall lifecycle hook node dist/index.js. At install time, the script perform...
Malicious code in paysafe-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce9ede35fc7679965ba83f58e829a328482bf1fbdb2e450d23e20bed24d708f The package presents itself as a Paysafe REST SDK PaysafeClient with payments and customers methods but the SDK methods are stubs that return...
Malicious code in notify-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25536516e16cffdc7ad2891886d7dcf32ad325b9ba79c2359026809bcfbf417f Package published as notify-utilities masquerades as the pino logger package.json description, keywords, and index.d.ts are copied from pino; the...
Malicious code in notify-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cbb2ac45124e3844e29f3efd70ca26f0089ec4eaad718bcbdaf3035ec9b34b The package impersonates the pino logger API exports module.exports.pino = middleware, ships pino-style files such as lib/proto.js, lib/multistream.j...
Malicious code in notifier-funcs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da033e00206575ad1328031d625b6c6281332e9ecf5514feae6e99cb285d021 On require, index.js spawns a detached Node child spawn'node', ..., detached:true, stdio:'inherit'; child.unref that runs lib/vcall.js. That script...
Malicious code in chai-as-buffered (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d136202d96267459c4bf3aaaf6c903d7bd2c491901b61dcf2f391a4612f951a [email protected] is a typosquat lure name resembles chai-as-promised; README and module exports impersonate the pino logger whose actual...
Malicious code in chain-chai-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 655c64cb99f74a3b96f1b5e1d0102ce0c756e63368a5ca252e70e49e98f346b3 [email protected] impersonates the pino logging library README badge links to npm/pino, exports module.exports.pino = middleware, and ships file...
Malicious code in chai-as-sharpened (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854e8e5d81ba59ee1353535523ea62b29c07de8d6a5cc50745a471696d80576a On require, the package spawns a detached background node process running lib/initializeCaller.js. That script base64-decodes a hardcoded URL...
Malicious code in @calm2026/imux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a755ff37a1fe6e18a3c050a0cf93bfadf80e790fd585c8e09a70179d07ec62f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in testudo-pack (npm)
The npm package testudo-pack is byte-for-byte identical verified via diff to testis-pack from the same npm publisher ioa2102 [email protected], differing only in its install hook: postinstall: node index.js instead of preinstall. It presents itself as a small binary packing/checksum...
Malicious code in manik (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9f5401ff0b4189038b0682df9360adf8a7b3f1c0b19f41726a9bb1ebb6770d5e During installation, the package exfiltrates random files. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in na-rony-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73b485b2a162e7940eb348df343cb7bc4a1a84ab2533e71df742204df778e4b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @sqlite-list/schema-generator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db66a72ece64d62fe02a712d609f136a1d5bae710c8a97b82dde8e7c39ad9bf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zircuit-reporter (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in yreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sitefinitywebapp (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in reuactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in resolve-uri-internal (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in reayctjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in reavctjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in picnic-work-app-terms-of-use-de (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in picnic-work-app-terms-of-use-nl (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in picnic-store-design-system (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in picnic-store-basket-miniapp (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in liportal-web-app (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-merry-fir-592 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-bright-star-581 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bitu-sdk (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in apache-arrow-17 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in anguwarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulyrjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulmrjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulazjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angularks (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in anguiarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angubarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/user-activity (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zztxtwtmp06 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zztestproxyfooabcxyz (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zswactb11785 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zsical1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrztrans (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zpx52530rm (RubyGems)
--- -= Per source details. Do not edit below this line.=-...