233076 matches found
Malicious code in @gocortexio/npmgremlinbox-cal-1-0-combined-work-exception (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76e5b6e244c7645a990797de600bbe5b61534485f8037ec0b8b865a50c10b523 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in akrai-report-new (npm)
The akrai-report-new package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms...
Malicious code in @iphouse/api (npm)
The @iphouse/api package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...
Malicious code in markscan (npm)
The markscan package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so that...
Malicious code in @markscan/core (npm)
The @markscan/core package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms s...
Malicious code in iphouse (npm)
The iphouse package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so that ...
Malicious code in smb-portal-uikit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 395b88ae26544dcfdfca9d46294e1f0558c2e5bade88bac0eb0797d1140debbe Package [email protected] declares a preinstall lifecycle hook that runs node index.js. On npm install, index.js invokes childprocess.exec on...
Malicious code in avatar-forge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79e52ebdc93b154163545b64642ea4c4016c4a69692c6f9e20e283cce3842770 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in string-morph (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2321f2779aa9d5215d5d6d39826da4494df38ce8c6d89e6b21ad78a27511e07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eth-lib-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13895e2e8ee4aa9683c2fd6f0f873a38b19bbc5af207233e22c51668bc7dba41 Package [email protected] impersonates @ethereumjs/util / ethereumjs-util README, author list, repository URL, and source tree copied from the...
Malicious code in @spzhongwin/skill-logger-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970980f38a6389d5b622ca41ba3b418f1538b2a38f595536c97acb934012b8b9 The package advertises itself as a skill usage/error logger but, when activated via the openclaw gatewaystart hook, opens a persistent WebSocket to a...
Malicious code in nottuff1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5133eecd8c40ac8e4617b364ea9710a03f88e60f8e2d1252a8ee539282da29e1 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in bomboclatwallahi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a7d4f08c0c79c42f9938a1c11d3d6828907fb309e582faf38065bbd04f5149 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @gt-test-exp/profiler-exp-00000014 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c51b7092656c3db4fbbdda5d871101d0c628296f48b0721d5582ac611e48e90d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in gpapp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8adfa222041807cea6aa53e26cca9c0eba0922efbb9afd0d201d90a3ba201165 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @espn-ping/react-dmed-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0467ac62043cf22dd249a99ff1279646dc599702140998ff5b86c79645364 @espn-ping/[email protected] declares a preinstall lifecycle script node index.js /dev/null 2&1 that automatically executes on npm install...
Malicious code in rfeactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rezactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in outer-package (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in oreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in options-msg (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in motion-ani (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mcp-ci-runner-poc (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in icons.generated (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in google-tag-manager-integration-sample (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gontawesome (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in gitpath-package (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in generate-iam-token (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fnnote-frontend (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fiat-token-admin (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eslint-plugin-dagster-rules (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eslint-plugin-click-ui (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-lanternlit-giftbox-663 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-glittering-cushion-945 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-holly-bauble-986 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-fuzzy-ribbon-874 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-frosty-hammer-191 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in elf-stats-candlelit-pantry-649 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-fetchs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-as-upgraded (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-as-consisted (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in box-ui-elements-usm (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bitu-user (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bitopro-trade-guard (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in backoff-table (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in atgularjs (npm)
--- -= Per source details. Do not edit below this line.=-...