233070 matches found
Malicious code in ui-core_mal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c66ea54316ebd799590186156adab4ff03ad3108487b4c5c48192924efcd60a The package ui-coremal was found to contain malicious code...
Malicious code in skyoauth2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c8093f2acd2eeb615402cc142718c4e4ca3d82e4121cd316da58869ba595a2 The package skyoauth2 was found to contain malicious code...
Malicious code in react-query-core-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bce94f40a0e1879b184cd9f5abb5f4850d66aa5705b231b41337c2e2e33a3de The package react-query-core-utils was found to contain malicious code...
Malicious code in react-performance-suite (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8467a722c92d3c846a99ea30e0b092dd93fba781c34f93dae9b05582d4475e The package react-performance-suite was found to contain malicious code...
Malicious code in pru-lib-ng (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f37bedfc6e1d85a81c4656a0af7b09fd927fb8d1562702d8766104ba806d95 The package pru-lib-ng was found to contain malicious code...
Malicious code in proleis-web-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd065de5d26ebde43c9fef2003ea3ffbc21bfa47120965cf1c6a893da876d33 The package proleis-web-app was found to contain malicious code...
Malicious code in plate-playground-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac5bae237041bc5b4bbd86a3aa58c9cf5734d4046742565f738e9580f95b3d4 The package plate-playground-template was found to contain malicious code...
Malicious code in phx-core5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b50389bf1ccd774bf7ef41ddc301049375776e994f84731a4baf15104bdbd7a The package phx-core5 was found to contain malicious code...
Malicious code in phx-core3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c182980686938a51acd427be3197fc50c4af1d05945b77563405f764c7b910c6 The package phx-core3 was found to contain malicious code...
Malicious code in dotenv-mono-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e4774845081c77828c11c246f1224738c74e91df84182defb19b32ff6a8757 The package dotenv-mono-cli was found to contain malicious code...
Malicious code in aitrade (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in test6789.latest (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bsure.binsec (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in 3rugfbe8rivferiuv (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in typescript-type-graphql (npm)
The package 'typescript-type-graphql' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
Malicious code in styled-components-a11y (npm)
The package 'styled-components-a11y' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...
Malicious code in aaaaaxxxxx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74022d63a8f08b2891b69972616980c694bf36c621e434d53bb293d3c556d50e The package aaaaaxxxxx was found to contain malicious code. Source: ghsa-malware 76e892030ae3b51f49aca22d108dff0826190b133c1d18bd448c9308b904f8d4 Any...
Malicious code in whop-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943bd287cb6375798fdee15ba33f85737201ea9934952ee5d1f2a2336e8cd65c The package whop-sdk was found to contain malicious code. Source: ghsa-malware 4c3e9ca78194532c222b978afd00f7bb4be1ca1ba6cd442e1892d17ee6e67ccc Any...
Malicious code in xpack-per-device (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f3e144fc188f6f28820784883e158f5841d1276a3eb100db4c469e45439f415 The package xpack-per-device was found to contain malicious code. Source: ghsa-malware 40c08125e60c3d43432e40679e35d49bb3fc0b9d4a3df799c45b80999f1753...
Malicious code in xpack-subscription (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edc6bb089c839e93cf7b71b8b46ca1f5d064272cac586b49cda41fc40b1c19 The package xpack-subscription was found to contain malicious code. Source: ghsa-malware...
Malicious code in @nazi-team/baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe057f6743744866cb43bc64a47f0b4e814f4de1d503ea59e8b3db6b3880ad00 The package @nazi-team/baileys was found to contain malicious code. Source: ghsa-malware...
Malicious code in expressjs-lint (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c3397ee6d6f62a99d9c9e5610fa1bcf756e7a58ee90c8997b60c73a642b98a1 The package expressjs-lint was found to contain malicious code. Source: ghsa-malware 841065e5ca8d5b64f5b09bd37c92a9d8c52d7fa2a5e52cf0f24737700853f7b7...
Malicious code in mqttoken (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aca93be8c1540d3f53af3e84ab54ac100f00390a05d10931f80ca2941beeb39 The package mqttoken was found to contain malicious code. Source: ghsa-malware c91a888cf7be32a16813cf296ec094ba2d56bf4706c030246a92f686bac1ea2c Any...
Malicious code in noteasonfnsource (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 fa2242ec1849ffa55a55c85b7781623cdc7147b8568b3beaa5d2b3b956c04e17 Code provides a Discord bot, which - once a generic command is called - performs malicious action against the Discord server: deletes all channels, renames the...
Malicious code in hashtools32 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 689514b83cd6496b0a4213d26325e73cd2c4f0e19128b969d19797bcdd4b131d During import, the package attempts to exfiltrate sensitive Telegram session files --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
Malicious code in microsoft-cms-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c507e9ca51bd8797443e8339d9069ce7a53d5b16d99e2198f6f856fcfa5a1ecf The package microsoft-cms-client was found to contain malicious code. Source: ghsa-malware...
Malicious code in sinon-web3-chain (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0984c139608f25fa3bdb0532d380ee76d21328bb17bb2d72f996112391a4e239 The package sinon-web3-chain was found to contain malicious code. Source: ghsa-malware 19e2ec9a6d3e1d35b0423ee04424704fd978ba989624faa1485f07c6de16b3...
Malicious code in sinon-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c9ac1d9ff3647908703db921b2e950e479861f18e7b1bad8377baaa7400d32c The package sinon-node was found to contain malicious code. Source: ghsa-malware 5aa93130bd1915120b30dc2472c774ac984ea2c2166d7865d30fdf8343225f50 Any...
Malicious code in react-svg-handler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63577e9faa19bf76dac1f171ee006ed6801a0726d5782ae1246bde01b508a7ad The package react-svg-handler was found to contain malicious code. Source: ghsa-malware...
Malicious code in z-shop-js-env (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c910274a4f0635a1545efdbfbd102ee02489acc2cc2e37c2c5bec67beb6ea1eb The package z-shop-js-env was found to contain malicious code. Source: ghsa-malware 9a1ecf70acc2b9592534b8c85342bac4b887b74656f5c9d971d51375fed00d9f...
Malicious code in fastpi (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2928970260fda87aaa57272b8042ae1a9661ad1a1bdeec1e73903e84ce3354cd Malicious copy of the legitimate FastAPI. The modification loads code encrypted in one of the attached files. The final, highly obfuscated code is most likely...
Malicious code in internallib_v828 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1fe83e3d9c31b100d3117b436d62cb5bbed907b6393fd0ae603bd365e73889 The package internallibv828 was found to contain malicious code. Source: ghsa-malware d15fc740eb3e49fec4406761a411f74ba5e572f8ead9811783ba32b4417d0db...
Malicious code in icloud-recovery (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3639028f2f9d36c20b55c655b1d71bc053827f4703e7954b12a4ec3da8edd8d2 On importing the module, the code exfiltrates text files, with the focus on configuration files --- Category: MALICIOUS - The campaign has clearly malicious...
Malicious code in zod-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6e0134575d22df9c8acb633e41aeb44e167203581cee75c81264667e9bdee The package zod-js was found to contain malicious code. Source: ghsa-malware df349fd5990c0cb74fcaa574f32fd30796c00bbe619ee60bd0eac1a658c7dd49 Any...
Malicious code in @spx-delivery/react (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03f32e2859ef16f71897fc985589e436c704979df087b57bb61fedb63e89c51 The package @spx-delivery/react was found to contain malicious code. Source: ghsa-malware...
Malicious code in rxjs-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a82756fe99cd57d9fc69d12a33d81146a6d0c78b3afa5926fa2531e1b3ced4eb The package rxjs-js was found to contain malicious code. Source: ghsa-malware b3538568871fe17ed55bb2e7a707cf1ca517f047348a754b2be9ec8798ab2997 Any...
Malicious code in react-svg-fill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 995c6ef17232fb1949de6b62053246036337cb070a7b06a466bb122d789c9ca3 The package react-svg-fill was found to contain malicious code. Source: ghsa-malware b09c58dca53550942f8c2595496e45d321f85551e7ce7a94e7059e50448f4709...
Malicious code in chia-gaming-lobby-connection (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54adc68041a37b745f5dd254458f4a92981e5954641131ac846256b6d4ab7f6c The package chia-gaming-lobby-connection was found to contain malicious code. Source: ghsa-malware...
Malicious code in @ensdomains/ens-archived-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c494307ab46ed2af70af69daaf50ee6ce9bee9d65e2f9610c692e97db58c7526 The package @ensdomains/ens-archived-contracts was found to contain malicious code. Source: ghsa-malware...
Malicious code in esbuild-plugin-httpfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc9c8640b4324e3d5e06e51fa01e3029117ab9121c0baa55b1f81b1b73019a8 The package esbuild-plugin-httpfile was found to contain malicious code. Source: ghsa-malware...
Malicious code in @posthog/rrweb-record (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19ff125dfd13ba489699b36ca14acbab8e87eda739d43d9a31ef2a3a59903398 The package @posthog/rrweb-record was found to contain malicious code. Source: ghsa-malware...
Malicious code in jeronimoekerdt.color-picker-universal (VSCode:https://open-vsx.org)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 5e1b0ef4a151e758eadda67d487723883b42f68292fd4dc8019068838e08faa8 This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency...
Malicious code in vuetify-solis-ariel-helios (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db11914411eff91a86bd9fc30e3118257d2d70966941af5e85e4ce806b854ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in loop-webdriverio-vulcan-proxima (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f9d3f3f64e3dcfb01546c14df5e1d0e289308f7238bf5fb36f487b9e92423e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in native-transform-nightmare-polaris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb8bba835dd74110960912c898ffa95ea4d8f290d3a2df21d8a9f8d597f9138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in tailwind-config-setting (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a671a6c3e625ad567f217586db00e2b324ca408c883c44ac1b74ebf292ffef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in not-shadowed (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in catflix (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d0f682b0d66f1100534a823b754c3bc096ac54a5142489698fc5589813699d9e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...