235837 matches found
Malicious code in markscan-utils (npm)
The markscan-utils package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms s...
Malicious code in @markscan/utils (npm)
The @markscan/utils package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms ...
Malicious code in akrai-report-new (npm)
The akrai-report-new package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms...
Malicious code in iphouse-core (npm)
The iphouse-core package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...
Malicious code in markscan-reports (npm)
The markscan-reports package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms...
Malicious code in @markscan/api (npm)
The @markscan/api package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so...
Malicious code in iphouse (npm)
The iphouse package was published to the npm registry by user 'jonothhu' maintainer email [email protected] as one of 19 packages in a dependency-confusion campaign targeting the 'markscan', 'akrai', and 'iphouse' namespaces, published in both unscoped and scoped @scope/name forms so that ...
Malicious code in twilio-assets (npm)
The twilio-assets package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by user 'yuva2210' maintainer email [email protected], all at the sentinel version 99.99.99 chosen to outrank any internal/private version and win resolution against a...
Malicious code in http-req-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6fcf8bb9984d83b39b69d2dbe9e0e928c5eeab345a2fb05446ab0f6e5eb1a11d The OpenSSF Package Analysis project identified 'http-req-lite' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in formatters.ts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21827129edc8dbde114c615df656d5a234d1fbcfa5b9f63d5286d781253e8f2b The package declares a preinstall hook that runs index.js on npm install. index.js collects host and identity reconnaissance — os.hostname,...
Malicious code in rakibox (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c59dad78f7e47be7f92d7ab89e245bb096f2e4f8679e73f00934016f1823625 Package is advertised as 'A minimalist Git wrapper tool'. When the user runs the documented rakibox push command, the CLI recursively walks the curre...
Malicious code in ls-env-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db44619df34ccbffa5747f17c8135602583a781ec01f8d3c03e0f828157e944c Package declares a preinstall script node./index.js that fires automatically on npm install. The executed index.js issues an HTTP GET to a...
Malicious code in deployowl (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b875dd11198fbfc694fe8b3227090e95f13734b5cf64556c6c727b48d7471035 The SDK's captureSnapshot iterates Object.entriesprocess.env and attaches every environment variable to every captured error, then POSTs the payload ...
Malicious code in @debile/require-dir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3075732c05c8b941b57fed9e8fe9c788b28f9ff6fe9ef91936d1802f568c594e Package @debile/require-dir republishes the code of the well-known require-dir package under a different scope. Its package.json preinstall script ru...
Malicious code in yargsplus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47ae65e1d6362744681f51216b451ba9889176b3b0c28b1b4c943f1b5033fdd4 The package declares a postinstall hook node.init.js that runs automatically on npm install. The script enumerates roughly 60 credential and CI...
Malicious code in relative-time-live (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffd93ad946d5607c42e226106c1f1b33370e92e92cf0a407928b7349523fec4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in valid-scope (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8258d9b773ebc2f93cfb302421cba0c6047d258bb44355ec9ecd71ce74d2f90d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in duration-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41e28074a6cb11bc84c0da4f15b1b2f5c8546f7955638eb34320bfbd62612908 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in eth-lib-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13895e2e8ee4aa9683c2fd6f0f873a38b19bbc5af207233e22c51668bc7dba41 Package [email protected] impersonates @ethereumjs/util / ethereumjs-util README, author list, repository URL, and source tree copied from the...
Malicious code in polymarket-math-stake-kelly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408b5fd87b4b328671330e1ddb9333eb5d68d9a873f30237bd886a7632f038b5 [email protected] runs scripts/install-check.cjs as a postinstall hook. The script reads a config URL defaulting to...
Malicious code in jest-formatter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1f270f7df9ee4f9088044964921e1b085b809ddb1d696e652326c58e5c0aba The package [email protected] presents itself as a Jest test output formatter but its lib/collect.js imports childprocess and invokes execSync wit...
Malicious code in abuden210 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368c280a0e86d6d687aa5789a4bca9daeacd64666dc6954dd729a7549f506a59 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in nottuff1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5133eecd8c40ac8e4617b364ea9710a03f88e60f8e2d1252a8ee539282da29e1 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in ishowfeet3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc732922556c087a288d536adf6ef6bf7d643946239cd9563e0a9bc9b6960205 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in ishowfeet1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49cfb64273573166bc38b5ef83b722b3a264c8e19870fc65b35eaaa5504a69bf The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in bomboclatwallahi (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a7d4f08c0c79c42f9938a1c11d3d6828907fb309e582faf38065bbd04f5149 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in backup4-gasp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e42991a6cdb40d2c1dec58317f280d0a6e38ad2dfa14b1a0dfe2ac40c5dc18a The package ships multiple heavily obfuscated JavaScript bundles under assets/ AccountPage, DarkVeil, GamesPage, PlusBlockedNote, SettingsPage that u...
Malicious code in captainindia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733cf02dcdf94f8882c708ffcafec943cc986ee2909b6c6800ee9e34c8b8fccb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in changiairportpromax (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13ab194f6c4e1d4197856c229f74ebf46e7eb90ff703ff4dc3172379aea96923 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @gt-test-exp/profiler-exp-00000006 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46832c276e26bc47c7c29aa926eceeb289e5579037272b187f0691fe5adbee16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gt-test-exp/profiler-exp-00000011 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8469d200c782e7ca622ab45b8feea3d4f93ef1331508444276ac8dee60a3c66 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gt-test-exp/profiler-exp-00000009 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c84ce939d8df9588dac92328a32e8a93cc162df1c691edf60d955c440a4ea5da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gt-test-exp/profiler-exp-00000004 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91349d128e919bddbdd9b7bd7f82284163d6282d072040a816ae22e14401c363 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gt-test-exp/profiler-exp-00000001 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0285c20b8d174c6e3c2540d3ef222917a7c087bc29c9698f338bc862954e9d84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gt-test-exp/profiler-exp-00000002 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dc5884175c7dc809c1bbc5ffa179fb86fb84e07903ca747d62692257a7972fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in apps-gpt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e4f318d51a7f0497c7ccda97eb2fbb28071e892d784e3204cb12d9a0b77b4ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gleamkit/ws (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc9213fe9e786988b3fd882b571f03aeaa1487b8006badb837b4e804da66eee The package publishes under scope @gleamkit/ws while copying the ws package's description, homepage, repository, author, and README verbatim, and...
Malicious code in @espn-ping/react-dmed-oauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc0467ac62043cf22dd249a99ff1279646dc599702140998ff5b86c79645364 @espn-ping/[email protected] declares a preinstall lifecycle script node index.js /dev/null 2&1 that automatically executes on npm install...
Malicious code in chai-promised-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddaac3e93ed2e5d968816cf3153b2ab1878580bb9ee65ec3ec1acdca41dc018 Package masquerades as a chai-as-promised plugin / pino logger README and exports copied from pino, including module.exports.pino = middleware but on...
Malicious code in chai-as-balanced (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562ae39db73c30faea0a6d84cda0fe0b68d60d7bfa863f769edcdb620e30b0a1 chai-as-balanced is a typosquat of chai-as-promised also impersonating pino via README/badges/exports that ships a remote code execution dropper...
Malicious code in shiphero-dashboard (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in serverless-twi-testing (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rpeactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in roeactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rleactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rewactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in reacrtjs (npm)
--- -= Per source details. Do not edit below this line.=-...