Malicious code in zwday26 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zwag26 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zw_nobdr_week (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zw_nobdr_day (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zvgit7iym3nqhe5 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zvbzr0rygmzwp45 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zswmeetxml28208 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zswcalgit1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zsbing1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrzxe1f47c (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrzst (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrzoffice50 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrzjtf69db (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvsearchf663 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvsearch15a9 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvq3b2f (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvp5 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgview1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvhac1d (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zrgvbi0fe1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zpx52551xm (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zpx52497hh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zpx52477bh (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zpx52474ag (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zlx8866 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zlx30721 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zjiasearch1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zjiamd3 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zbzrx48e5bd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wprwn3accxyz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in uxbcrwands3 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slncdmcgtq (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slnbszoimdgd (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oaitsvnxlnrat (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lbrssypnbowmaf (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in winston-prism (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06134c2a9c642914c91312e4d0184158fda282ec1bb3715fc143e7834993e266 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vite-plugin-svg-paths (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3808a0ad54ecf36bb7d7da093b2a9982c01b87bcadb4ada918552c1738cf7fba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tailwindcss-animatecss-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5eceac19f8659a9b4fbca6de33a2c5ec75c732f50b6d4cee97e958546a201f64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ts-eslinter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fe794783cf855aba4980f7186b85866fd3048cbb97803fe8c575192cb30d44 Package name resembles common ESLint/TypeScript tooling and the main entry index.js contains base64 decoding via Buffer.from...,...

Malicious code in ts-relayer-pub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a8ec05f673f1d04b65918474a638737320ac81126814fd8be765bbdc2bb5c1c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tracing-str (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 466143b5f195d4924e2227921a288954ecec9ed34d52af8ff433056f5ff56903 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5645051b8c021a473b5b5e8ffc5771c65265a02502beff5bef28932c4877cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in npm-eslint-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc5c1992c3d9f33bca28c1ce098d769809e44a12a671972925815e9890e5e9f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bootstrap-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9ac4913fc1ffcabe1ed6637abc6d532abc014683f48b341ece6127a51da15d8 The package's index.js is heavily obfuscated with classic string-array shuffling patterns e.g., while!! loops with repeated 'shift' calls and...

Malicious code in rollup-plugin-polyfill-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcd05581537eece4993579cb664215a82b87dad2bdb03cae7ba998ba092a79d Package name mimics the rollup-plugin- ecosystem but exposes no Rollup plugin API. Its exported functions getPlugin, setPlugin, and getPluginExten ea...

Malicious code in zredis-typed (npm)

zredis-typed is a malicious npm package and part of the multi-wave "forge-jsx" cross-platform RAT campaign Wave 4. It was published by npm account 'donimique' [email protected]. The package.json description 'Node.js integration layer for Autodesk Forge' and the bundled README.md literally...

Malicious code in urlllib321 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 376c7a8609fa48f74e0229f95c4fe5a4e4a4c94e923da4ed11e8a1f475807127 Package is a typosquatting or dependency confusion attempt with a low-harm local-only action, like leaving a flag file. --- Category: PROBABLYPENTEST - Package...

Malicious code in debugcli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff9ad8188112d91f0ea673971f4421ca96dc7943ba12d65c7339c1aa75c2226e The package name debugcli shadows the popular debug package, and index.js is a thin re-export module.exports = require'debug' so callers observe...

Malicious code in @jacobtan/decode-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a99e8b0d7812c216410fc0ff557698f61a595d4ded8579c18fab63ab3ac8b924 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ue-python-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a6d9d874ce102a9ac674f8f713472a473007dc3d51adb869c5198afc708751 On import uepythontools, the package spawns a background thread that issues an HTTP POST to http://109.123.247.172/pypi carrying a JSON payload...