Malicious code in angulards (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angulahjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angugarjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in angubarjs (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @buglab/pino-pretty-logger (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @athena-ui-components/user-activity (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zztxtwtmp06 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwxbccaba (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwwacta5072 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwtd102 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwmeet017694 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwkopt5 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwkopt1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwknum1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zswbz1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zsanchor1778553679 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrzx3fa129 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrzx3dfd1d (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrzjj2 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvqf269 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wgsfmore63 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandhr8 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wandczvof1hg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in v22zzgbqvirfx (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in v20zzgbqvirfx (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tryd2zz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in southinjectabc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slwsvn7762 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oakmi17200 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mt8320mzji (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hackbzr1778554791 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in extfetchedwand1778555624 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eiljanlanhnz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dlxprobe10 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dasswcal71 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @higherlogic/ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bbd559291bd6c2d7889aebe011bb43bef61938171904f5c9ff378f33fd9e5e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in renderctx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbdcdb9e0c6002d228035d5d746f734a23c224429a18e078a44e5fa65db495f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pretty-pino-loggers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f1b4c6d11dae72d82f4c6d856e9445f27cee3a1ed475f2043b5d7369aad48be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in neon-terminal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe8b090e304f95042a17db9e22edef03d8cdd073a214806e8aa3ebe7b2d138f9 neon-terminal advertises itself as an ANSI color helper but its CJS entry dist/index.cjs and ESM entry src/index.js each execute a shell command at t...

Malicious code in tme-xca-react (npm)

The tme-xca-react package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a 'tme' internal...

Malicious code in tme-error (npm)

The tme-error package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a 'tme' internal...

Malicious code in web-api-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca2f8dce9e845346901818eadd06a0cda318c99ac3e059cd076d9f4065e2c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @lodash-en/lodash-en (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ccf4c6fcb3eb02a4b990660b8a47961f0cd393915787990149de40ee1b201a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in robomerge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8f632bbc34b020f78b4dec06ddf1bc50194ce117dfe609484d05edc76d7790 package.json declares a preinstall lifecycle script that fires automatically on npm install. The script collects installer hostname, username, cwd,...

Malicious code in unreal-horde-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15cf7eca1e6de1e7ecc5fe67d8094125f20f6ca4256e843b72e89760c97888b8 [email protected] executes a preinstall script that runs automatically on npm install. The script collects host identifiers hostname,...

Malicious code in electron-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faf51a6c9d6ed9fce8cf9de9ea8afee0e9c3dc1fb254e8cd0c3c2a8ca61323f On require'electron-orbit', the module unconditionally fires an auto-prefetch pipeline in Node contexts when no document is present that opens a raw...

Malicious code in node-pino (npm)

node-pino is a one-edit typosquat of the popular pino logger that ships repackaged winston plus a malicious postinstall dropper. On npm install, the postinstall hook npm run license - node lib/winston/license spawns a DETACHED, unref'd child process that reads an AES-256-CBC-encrypted blob...

Malicious code in @huobi-ui/activity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a2dc07679f0c801fbb465a2502687e29ed687871964c5d84c0dd5f2b7f94e8ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in clx-cookieparser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b7ab13cd76393ea58b540ccf13b4ab4660edb4fac210d86a67e51b45fa1d0c Package ships a verbatim copy of the Express 'cookie-parser' middleware under a different name 'clx-cookieparser' and declares a repository field...

Malicious code in layerd-unit-codec-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca65bb450fc2f4d4596fbcc2ddd81af358c2d02f94d965b18e532d8afa62ef5f The package presents itself as a CSS selector parser src/selector-parser.js re-exports postcss-selector-parser; keywords postcss/selector/parser/css,...