Malicious code in 3layerdipstackrvc9k (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be081352be9a48c3e345b835cab9c021999436ea5ebb3651bb7a4a97b62b8ed5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackjj1l0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 802aadaae3993d59085710261543816ec373731aae53abd0988abb84bcf16d29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstacksh21o (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc5543572867567826e9ddf2b780db506e9735272e29709e97609637c48914d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackfm45yj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b1ddf92d052ad44338e1b280af5bb2903f102a0de716e1186cde47c0669282 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstacklskknx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa0c6e77b801d6893cd19f64c7fda49eebedd61942d61da80f345d1abb67923 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackicrmv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2a2bd9a841da9a7fa6ac6e323b6baef00a8e377dc1d94400e0b7f0d289fb186 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackuu02ly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be0ad67d22040139dc128f8a320d0b95d67571f954898946065369d705b89550 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack1lb2r (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1792d68f1a0682ffcc4badabadd779b61886345521ea96f41487930ba1635754 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack7lknl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6611ec62b6f8623df5dd819bb66d682635bcc9c5f0d3fa55a9d2b3ee05be07b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackihi1o9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7a901824681511a2e113ac8f970984a35b6e042d971695d8933f0a44f58442 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackl7gab (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebbd6f3b295c4ebff364fdf968fe3c08e1b418d11e6bd7271999159641bda037 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackyt68w (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20469062a8b784740e2ff993260de3460227928a3033cabf9df2187d691e3385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackp5nvj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 558312cfc333f2aaafe0bfb533132147f64249a3a3476bcac89384b317944adb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackvb5y6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a9a6cee13556e1977ca40657781de0b5d72f5e2491d8767ab659ab1e6c424da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstacksihvvg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07df16c38453d03a1e14a32b88fb5ff842926a8e4abb15e111694e566a3eb450 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack7wbw9m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddce1a9e98f319b9369017a9264e598035c7f8896d0fef4a756741ede295588 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackm1j2h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fd15af8c52e8e1dd4a62c42938fdd7f64aa6f5230de59210dc82d6e79e2b8fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackgrzn5z (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 695f9ecd86fed30838335f7cf62be6c35bd16701fc3b39137ecc2b6218c3c09d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackds3oln (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1497135f91ba31b1cc557c7a3b42aa6fdb7baf359f42a12d64ba790205f024 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstacktfp41b (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbeba58f65ce0555af04c96550f18ac2589acab83c353556b9b4d625a1669be9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackn7sxtp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb9c8d11851add113eb5c6b52280b11dc449fd86b090b332f30a7f41b8646441 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackyqrxdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4a1b449e872d6368112e9ea9d653e7919c643eac89dfeb4a86f58468134df8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackq0lwcc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e904b58e047461df1aab37a4ced0207f565fdfeb6d1937305336574998ad91 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackdfw3wg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e258a2610659f761673680d749bc22dcce464ebb9772c74fc74226990fb98dd5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in waxed-slightly-weathered-cut-copper-stairs-e7jj8nht (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 590698f775de927ede1b0c4bb360a36886881b49238991f5debeda6d61900876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstack75faj (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58898f40d447ea5883af6e80e7c00dcded6b56892b5b4bf8fa56ed883da39baa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackfourm4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6201726f590de9fa96f0aebe76a0fe1ad67a6ee5466a62a3eb5933f7655be1f4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in classlink-5bhzaaq2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56a31797e45409d53c81c5fd1c13bafbd1003278f04e48e54b8f9879924d629d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-sowghg1a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e62a2c1ac7b36b0d931ae670a59a0f87bf17d81ac6526287e5a6210245f5351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openai-pr-reviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3553acd3c5abc3f71b55740c4b06b2eb278f81bb678c55211f2287a498b60b61 The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working director...

Malicious code in @blurrydespair/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7ff09078e56bd40b5ad38f72027a55a39067b82aaffb0bfe6891e3d6d912e8 Package advertises itself as 'Open Whisper Systems libsignal for Node.js' but ships an install.js that has nothing to do with libsignal. On require o...

Malicious code in sm-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2741ebbd0df8c6f349a4d34361cc3d814fe878f3f4521fd771a855cfdc152b Package [email protected] defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardcoded bare-IP endpoint at...

Malicious code in 6-viewsight-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96501ebb5a5bb3858767545e256cdcfd23f164f4435c109d206f421771ce6e68 The package's main module is a self-executing IIFE that fetches HTML from https://bitbucket.org/p2p-alt-public/p2p-emis/raw/main/GameWebSight and...

Malicious code in create-coin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92da1d80f455caae769107e4b3ff99c003a296f1238728cfc5521d5be06c380 Package [email protected] registers a postinstall hook that runs build/payload.node.js during npm install. The script performs anti-analysis guards...

Malicious code in scrambleeeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65599e4b6ca9e8349fbde07e578e53844af217c6eca15dcd6bb99c8a1fa63f Package advertises a trivial string-shuffle utility, but its exported function scrambleeeer opens a TCP socket to bax.h4x.tv:6363, duplicates...

Malicious code in @js-lib-team/env-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae761b7dd660e94dd99388dedf8c2227fa6a683e314468e7a482cd649c2e1a47 Package @js-lib-team/env-parser is advertised as an environment-variable parser but on require/import executes a top-level IIFE in index.js that read...

Malicious code in create-react-app-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce3734765ee6802d3ccdbbecb091f613417a1ff055ee8fb75ced9f7cf36ef31 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in test-flow-entire7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac2aa8c9e03f819fc35f4abe8554abf07333c68617df6a2f844d11bb3374594 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in express-route-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f54041362d71f16d1ee889c3992558cec28371030eaca4a3962ac0e9e3ec55d On require/import, index.js immediately invokes an initializer that HTTP-GETs a JSON document from...

Malicious code in base99-85x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b7a4319eaf4f75e0e4138802a61018a4016e0b1ff69e9e8eab51eeb01a240d base99-85x is a typosquat of the base-x encoding library. Its main export's decode function POSTs every caller-supplied string, as JSON "text": , to...

Malicious code in node-runtime-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac7a39a8896a7f78a20fe79758f146d2158f2fc529e51ac705720a745552770 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in bunnyhijack-test-0x00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652b21307c316c7a3237991fdfb6dc4d43716997a91268f43fe9c9c65a3fd76e package.json declares "bin": "node": "./shim.js" , which causes npm to place a node executable into nodemodules/.bin. Since nodemodules/.bin is...

Malicious code in eth-react-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b9bdf79a694cbf6d1a840541b4c47fdac8dc6ac32f4b6a3d4887d5f81233387 The package advertises itself as a React Ethereum provider exporting EthereumProvider/useProvider/useSigner/useNetwork hooks, but the shipped main...

Malicious code in @wizloft/harness (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3679ede1e874f59f4be963544c3df43069cd335b2f888753b7411e42c7a5d3dd dist/index.js — the package's main/exports entrypoint — presents 200 lines of TypeScript-compiled SDK facade followed by a single 40KB line of...

Malicious code in node_cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e10a704c94a9f7a4f6344a67e3867cd87b21be574e81bbdccdc6b5ca48f65a2 The package presents itself as a Node.js cryptography helper and depends on ethers, encouraging callers to pass cryptographic or wallet material to i...

Malicious code in ai-texts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f70364834c6aa09fed4520d6144867e921c75f416d315addf2ec3b28a92d2e4 The package advertises itself as text helpers for AI pipelines toText/normalizeText but src/index.js unconditionally invokes a dropper at module top...

Malicious code in upload-to-gcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094f90a9780964738c1b9aea702c5554c802fba03f1a7e28c0703531dd04590 [email protected] runs a postinstall lifecycle script on npm install that collects host identifiers os.hostname, process.platform, process.arch, No...

Malicious code in @velliajs/discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c86edd3f7edd7d111df5621cb884fd0ef3d870c6c0719d587b7bb0f16f65b8d The package presents itself as a discord.js clone repository field points at the real github.com/discordjs/discord.js.git, README instructs import...

Malicious code in @mexc/shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d793d1ff65b7f5a24e1aa0c176eaa5d83c7870e05cca5b64f22edb9ca7ded7 Package published to the public npm registry under the @mexc scope without evidence of scope ownership. package.json declares a postinstall hook...

Malicious code in @lodash-js/lodash-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e8f6925f88772bdb738b691a200f670aebecaef33c066a379d9424c7910a5a The package is published under a name mimicking lodash but its manifest's main entry is dist/xelis-miner.browser.js, a Xelis Stratum cryptocurrency...