Malicious code in @tostringtag/nsettostringtag (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @frontembed/lib (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @buglab/pino-pretty-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bmg-web/bmg-key-value (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @athena-ui-components/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @athena-ui-components/layout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @athena-ui-components/helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @asurion-core/eventualize-react- (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zzpdfvar02 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zzfadgivar04 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvqf269 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zlfr20694 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zlam_httpsno (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wp924 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wnumghplcqou (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wgssrffossil1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wgsfmore63 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandfosurl (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wanddbbehg03 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandczvof1hg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in v20zzgbqvirfx (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in uxhttpslamb1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in swlicrep7a (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slnsq10 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slncriiuuy (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sgxtvmueur (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sgpajdnsoz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in newswandagenda1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in newslambcaljan5 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in m8320v2umh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lf295q9 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lckxcksgmwc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lambethssrfhack (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lambQ4346 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hackfossil1778554817 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in goimportinjmeta1778551143 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eilfossiltestlfpxe (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in c00_arcguide (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @higherlogic/ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bbd559291bd6c2d7889aebe011bb43bef61938171904f5c9ff378f33fd9e5e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @flex-ng/header-component (npm)

The @flex-ng/header-component package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization the...

Malicious code in vps-maintenance (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5dcc405a10775ace9fab68ee0a5ddf9bcad770d29e20f999df6d41072e46b1 On import of dist/server/index.js, a top-level block spawns a detached shell that 1 appends a hardcoded attacker ssh-ed25519 public key comment eni@l...

Malicious code in bytekit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbaea22b635a4a8425964572b733b806f45714a9090492d1c39d545088fe336 The package was found to contain malicious code or consuming dependency that contains malicious code Source: kam193...

Malicious code in schemavault (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0aa9efa2a8389cfe9d5c41d5ab3689f4965c945a24613493f94f9de033ab1 schemavault 4.1.0 is presented as a schema-validation library but ships capabilities and data that have no relationship to schema validation...

Malicious code in web-api-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca2f8dce9e845346901818eadd06a0cda318c99ac3e059cd076d9f4065e2c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in horde-python-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2ae9afcd7af22c82b137c1142ae643502d82f3d1f28712b2e5c7ec412bea85e horde-python-client 99999.0.0 is a dependency-confusion lure. On import hordepythonclient, a daemon thread unconditionally POSTs a JSON payload...

Malicious code in robomerge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8f632bbc34b020f78b4dec06ddf1bc50194ce117dfe609484d05edc76d7790 package.json declares a preinstall lifecycle script that fires automatically on npm install. The script collects installer hostname, username, cwd,...

Malicious code in vitest-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0165cbb3d6ed37a96889c4b016463706346e1c09413635c31ea1ceedde8774 The package's postinstall script node lib/utils/index.js spawns a detached, stdio-suppressed Node child process that runs...

Malicious code in brock-react-alerts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5241549789e8a03d9ca593f6803199ed0d3328b6b2fe708c80f1c5f99c05338 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thirdwebb (npm)

Malicious npm package published as part of a coordinated DeFi-themed infostealer campaign. thirdwebb is a typosquat of the legitimate thirdweb package. It uses a side-loader technique, pulling in log-taker as a transitive dependency; the infostealer runs automatically via that dependency's...

Malicious code in @contenteditor-shared/content-editor-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9fc086285355b04152703d1c9de2c2a48e3b70580c5f8cb02fa60918e52f47a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...