Malicious code in 3layerdipstackdcw7ib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9953b83a58f98dcab3b53bb6c86ad3c58551c532b20cbdb057725e9fef728dcf The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackr7ib9k (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e700d8fdf8a230a433bbf1fc3084c4a823335f7fbf4b2bca2ab54595564deed The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack3hsru3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a98c76672c7f9b7132f0b0844cd4d0afc38b638b83ccc34773caf085db81a5d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackwc0qja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dea8436224ec172ea1fca4f5a40f1fcbe514a5988749535bdcb77a26bb5975 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack4ilqnj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928bde04253d6eb906a30623cb658894bab1a8415aa829674556a74a1a067475 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackzpi9o (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1720cb26b23342c1b33bf794223358f70a283435be7840e0a24335e9ef2b7734 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackay9drz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de30a1ba6881ac4e1a10a18dbbe6420299ec33a1287293a71aefbb56537e6bb0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackm1j2h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fd15af8c52e8e1dd4a62c42938fdd7f64aa6f5230de59210dc82d6e79e2b8fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 3layerdipstackoi4dda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b53d12237157e6881552333f5ead22f5dbe308d52e50157f5fca9c599c6415 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack5hkzmg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a02ade4a560a71d164213a26c407af8c69117100c94edad75147b8f1dddbe817 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackn9ng1d (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c33ebdf844bbda1d08188ad7622edf7d5304905e2d310b9386f7e9dd68ac4b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackx1zi8p (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775bddfd57a86cbc244b173168d776c1116009bc413df36940c6f91c4652f743 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack0dsxsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2643a6598b1615516404fd1c24e6bf45adf0b325f211259b80191f7858c72ea6 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack4dhmdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0ccaa499343ec1f18b5618c6f7e9c86899fee1d1e184e9cbf419add99187c0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstackiud1lz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bfbdce5458620287aecad1c66caa8c2effa5af255fe4787bffd153024b505d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in 3layerdipstack6jqkjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3282758727328d8477c022b3347d6a69f149c13a840749cbd71039d28b7aeeb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in waxed-slightly-weathered-cut-copper-stairs-e7jj8nht (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 590698f775de927ede1b0c4bb360a36886881b49238991f5debeda6d61900876 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-5bhzaaq2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56a31797e45409d53c81c5fd1c13bafbd1003278f04e48e54b8f9879924d629d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in classlink-sowghg1a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e62a2c1ac7b36b0d931ae670a59a0f87bf17d81ac6526287e5a6210245f5351 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @opap/player-kyc-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfe2a5c5b34e28b415fb39f20acea1ec320ef85aeb9577c9a52153630f964fc The package's postinstall script runs automatically on npm install and collects host identifiers hostname, username, cwd, platform, arch from the...

Malicious code in hydration-dim-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3659ec02e8317602c089b822a4a0533bee515d9666d07fdaf3cdf8b315a46147 On import, dist/index.mjs verifies a SHA-256 digest of a bundled Linux x8664 ELF at dist/internal/calc.dat, chmods it to 0755, and spawns it detached...

Malicious code in fund-portfolio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ba065e8759299d381ed1c7abd5e7721037b4ea969a384a9e70cfb6bb799e17 Package declares scripts.preinstall: node index.js, causing index.js to run automatically on npm install. The script collects hostname, username, hom...

Malicious code in 3-buildsight-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed2d8b62e8d6f475efc170e1f26783037acc358eac7f32153110f29ecb415545 The package's main entry contains a top-level IIFE that runs on module load and fetches content from a hardcoded Bitbucket raw URL,...

Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de7570e75b52c8d98aef5a71ab1b1183991359e7e3e1864befba58a9f5ca630a Package published to public npm under an internal-looking scope @usaa-grp-personal-profile at version 999.0.0, a shape consistent with...

Malicious code in create-coin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92da1d80f455caae769107e4b3ff99c003a296f1238728cfc5521d5be06c380 Package [email protected] registers a postinstall hook that runs build/payload.node.js during npm install. The script performs anti-analysis guards...

Malicious code in boto4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f621c5e2e8e94d1c8ae2ae176d4d882711536d25199df7a1cdddd410214faa setup.py defines a custom setuptools install command EjecutaElf that base64-decodes a 17MB embedded Linux ELF, writes it to /tmp/.systemd-helper,...

Malicious code in mcq-session (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1acf694ae0258defc54c414980c5f8512b7055e69630ede15a8bfb37d2005b9b On any require/import of mcq-session, the main module runs a top-level async IIFE that reads a file at../../../../public/logo.ico a path escaping the...

Malicious code in ethereum-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 918fc2f8674173624a85456e872db7d7dd93f3b13db149b4ee3bf5e540c3c53c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in create-react-app-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad9d14917da2cd3e79a2885cdb25d2009133fb55f9ed4bead87e677f64f7816 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in frenchworldcupwin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28b41919d402aff87ec13d36b2419e4c19dcc209dcb6ffa3e736de5be2803e6 package.json declares its sole runtime dependency client-marker-packet-cluster as an arbitrary HTTPS tarball URL on a non-registry host...

Malicious code in express-route-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f54041362d71f16d1ee889c3992558cec28371030eaca4a3962ac0e9e3ec55d On require/import, index.js immediately invokes an initializer that HTTP-GETs a JSON document from...

Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in base99-85x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b7a4319eaf4f75e0e4138802a61018a4016e0b1ff69e9e8eab51eeb01a240d base99-85x is a typosquat of the base-x encoding library. Its main export's decode function POSTs every caller-supplied string, as JSON "text": , to...

Malicious code in node-runtime-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac7a39a8896a7f78a20fe79758f146d2158f2fc529e51ac705720a745552770 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in evm-validation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c551a6031e48a54b550a604e2198a4491cf935407744bba8ef0c11c54086c4 The package advertises EVM address validation but performs no local validation. Its single exported function validatede in index.js issues axios.get...

Malicious code in node_cryptography (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e10a704c94a9f7a4f6344a67e3867cd87b21be574e81bbdccdc6b5ca48f65a2 The package presents itself as a Node.js cryptography helper and depends on ethers, encouraging callers to pass cryptographic or wallet material to i...

Malicious code in github-policy-bot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b8742a99002975ebaced2478673108f4f442e5ac7878651edeb8346702f132 On npm install, the package's postinstall script collects host identifiers os.hostname, platform, arch, node version, package name, npm lifecycle eve...

Malicious code in gaarf-bq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 841d3bc6f2f6b55bfe6c3d3ffd5daf2eb586507bbe35ff5ab8e706db076357d0 On npm install, the package's postinstall lifecycle script collects installer host identifiers os.hostname, process.platform, process.arch, Node...

Malicious code in ai-texts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f70364834c6aa09fed4520d6144867e921c75f416d315addf2ec3b28a92d2e4 The package advertises itself as text helpers for AI pipelines toText/normalizeText but src/index.js unconditionally invokes a dropper at module top...

Malicious code in fast-glob-fast (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7695ac02a2492bbf3118fc68514378edb201a93183f2dcb0035727781f31d408 fast-glob-fast is a name-squat of the popular fast-glob package its repository field even points at mrmlnc/fast-glob. The declared postinstall hook...

Malicious code in @mohamed_nowisar/depconf-canary-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078a8dc3351eb44ee9ff0d5992b9082b726d7fbce0152ae2d44595a9e279ef82 On npm install, the package's preinstall hook runs node beacon.js, which collects host identity os.hostname, os.userInfo.username, process.cwd,...

Malicious code in reseller-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5e549688dcd67cfcc86be1c65c7831f7c730036626c41484332cf7dca2d7fee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upload-to-gcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4094f90a9780964738c1b9aea702c5554c802fba03f1a7e28c0703531dd04590 [email protected] runs a postinstall lifecycle script on npm install that collects host identifiers os.hostname, process.platform, process.arch, No...

Malicious code in @velliajs/discord (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c86edd3f7edd7d111df5621cb884fd0ef3d870c6c0719d587b7bb0f16f65b8d The package presents itself as a discord.js clone repository field points at the real github.com/discordjs/discord.js.git, README instructs import...

Malicious code in @mexc/shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d793d1ff65b7f5a24e1aa0c176eaa5d83c7870e05cca5b64f22edb9ca7ded7 Package published to the public npm registry under the @mexc scope without evidence of scope ownership. package.json declares a postinstall hook...

Malicious code in @lodash-js/lodash-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e8f6925f88772bdb738b691a200f670aebecaef33c066a379d9424c7910a5a The package is published under a name mimicking lodash but its manifest's main entry is dist/xelis-miner.browser.js, a Xelis Stratum cryptocurrency...

Malicious code in alelo-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f1e53c8bced61d4dfbd9121821219a5c35f2a7f273f06e9e2cfd628f509341f The package auto-executes exfiltration code during npm install via preinstall and postinstall lifecycle scripts. preinstall.js collects the hostname,...

Malicious code in game_overlay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e941794f17bbd4170928ecfb4c2affa3b9464d9227bc5671e4899aaca4a88db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pocbitbarrontest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8730ba23c54aed5d25d755bc1f2ed8809e57cb1996b80d301a5f265a3c09052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @khaznatech/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d6d321090b3f66b7766ca73a5cebf1a2d3ab2908d8d31f8423616c8094ec0a8 The package declares a preinstall script install-report.js that runs on npm install. It reads os.hostname and the current working directory basename...