231217 matches found
Malicious code in staked-celo-app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67d1427804f29e64b173dba49a127547304fc5e45b01496a6fccf04f0759236c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in wundergraph-cosmo (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @linx-ui/pharmacy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b11f58a8b099193bd554037a57e978c958facba9835da91b672d8bc2155062f1 The OpenSSF Package Analysis project identified '@linx-ui/pharmacy' @ 4.2.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in cors-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1dd6defac5ab9b43c54c52dec3926781b0bf0a2e9adbf6122ae560a52002ccb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in perimeterx-fastly-js-edge-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 934118ad5800d3dc8e17c6e7ed99b345399d4eae19e298de4f8a35834f872cc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in twelvedata-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c036b95c651dc0bdcb11ec39fc95c8bb60573925682e6ad0b6a7a93290a1775d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in list-issue-predecessor-dependencies-block (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd4d4e3aa51ec1a7ebc0a0d4f728698503432546f139f67998849f8fff9b614 npm package [email protected] auto-executes index.js from three lifecycle hooks preinstall, install, postinstall on np...
Malicious code in wacve-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e59800b6fa0d3429fb7bccd34b4ae292dc2668919fba704a7b16ddff71071 On import wacveutils, the package's init.py unconditionally invokes checkforupdates, which HTTP-fetches a hardcoded GitHub Gist under the user...
Malicious code in mongostose (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f6ada9e2243bec8a49064b3433e766f098fd22ec40cbab730e81a5d6354abb3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @goodjavascript/dotenv (npm)
@goodjavascript/[email protected] published 2025-03-22T09:05:32Z, replaced by an npm 0.0.1-security holding stub 2026-07-30T22:47:55Z — approximately 16 months live is a two-file package that impersonates the API of the widely used dotenv configuration loader while running a command-and-control implan...
Malicious code in @wbnr/design (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbd908eecacbb587e9534c244be33296e6fa11092200cba8428351bb66afe844 The OpenSSF Package Analysis project identified '@wbnr/design' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in @peptide-unit/js-unimode (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc980d78557ad1dbd4c8b74d0f383ce26d360c48ae860e05d1685c7ee1dd847d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in simple-probe-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0457a026ab28fbb641d11e4e9ac9d60d026fd77210972f72e6ac931b4b06c59c On npm install, postinstall.js executes shell commands that query cloud instance metadata services AWS IMDS at 169.254.169.254, plus Tencent, Aliyun,...
Malicious code in rollup-runtime-core-polyfills (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868d4b253cfa762cd40d8064b3a99cbed00203fbed19402d5033551720690199 The package presents itself as a rollup polyfill plugin and copies the source of rollup-plugin-polyfill-node repository field points to...
Malicious code in parallely (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c7ec817d7407cffaa25209d066c7782cd74a1f91ea850887f7d2d85766b5f67 parallely impersonates the concurrently package: package.json copies concurrently's author Kimmo Brunfeldt, repository open-cli-tools/concurrently,...
Malicious code in num-format-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04a0ecb436de3a0e93a577a3ba1733b227bd536e02acf371df530c6a320e1001 Package advertises itself as a number/locale formatting helper but its postinstall.js runs automatically on npm install and shells out via...
Malicious code in date-sanitize-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b6764b7711cfa03cf6b3a2f70e24b3256a61ac9319d45200ada236fe7c3ed2 The package is advertised as a date parsing/sanitization helper but its postinstall.js runs automatically on npm install and performs installer-side...
Malicious code in txs-builder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98a8b0307879bf2bc46dff29fe69118808e91074267b971b97953defd9c4972f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @vinnxcode/libsignal-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6cd5c2aff996c3ecaed23aa0fb0f0b63c2fc829c2c1689b0bc27136714c8ff8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in amanexzyra-baileys (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91b75d849a9528c5b5c36142e8bed1b9b29063b91116e75ece79eff0f2c5a6cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in fazzanime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 078273c8fb515986eb1019d1fbd9f00c675790be7144b7a68680374352f55881 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @my_name_is_khn/express-security-tool-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb45d8539214aba2ca98223064b29e9fac2199f766f7e44430ba9f9b4d2d622d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in whs4_eud (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d906ecaf9f2ede0a31c6966b9d8402f4c80e57fb72eae7f9dfa1b3a7c583b8d4 The OpenSSF Package Analysis project identified 'whs4eud' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicat...
Malicious code in fundraiserservicepp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cefb4588a67439c112176df4b9af71d40a1e2a12e0bf81ef200affa79e0cb0e0 The OpenSSF Package Analysis project identified 'fundraiserservicepp' @ 1.5.0 npm as malicious. It is considered malicious because: - The packag...
Malicious code in vantora (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 530a2162909707ce34212e910d9a625ad0a4a6a746a7a48f5e3f3523b3b3df23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in veldora (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2e3a6a16c04af92c19ea149ef526996cdaea7357b931cdbccedffd6237f598e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in zer0onetencent2 (npm)
The zer0onetencent2 package was published to the npm registry by user 't2423048543' maintainer email [email protected]. It is described as 'A simple date formatting utility' but ships no such functionality; index.js only exports a hello stub returning the package name, indicating a package...
Malicious code in ishowfeet3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc732922556c087a288d536adf6ef6bf7d643946239cd9563e0a9bc9b6960205 The tarball ships auto-publish.sh, a script that republishes the same payload under 100 distinct npm names ishowfeet1-ishowfeet20, nottuff1-nottuff30...
Malicious code in @gt-test-exp/profiler-exp-00000013 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 036037f2fada913d2d48f6da85263a3bf5a08034babfcfb875803654a7b62daf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vibewise (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ac8cff44b5e6eda49cbb2c32a6333f5ff2d6910165abc081d1fe0d0bcf11118 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in oreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in options-msg (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in generate-iam-token (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in eslint-plugin-dagster-rules (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in dreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-fetchs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in chai-as-consisted (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bitopro-trade-guard (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in autoprafixar (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angumarjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulirjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulawjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angularrs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angularhs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulards (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angularbs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in angulanjs (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in anguaarjs (npm)
--- -= Per source details. Do not edit below this line.=-...