237178 matches found
Malicious code in zswgit2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zswcalgit1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zsday2711778553467 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zsbing1 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrzpdfjs (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrzoffice50 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrzjtff2e9 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvrawbz (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvq116b (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvp50 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zrgvbif79e (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in zpx52551xm (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wn5ielist1a (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandsdock7wre22semijan (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandhr8 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandfosurl (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in wandczvof1hg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in v20zzgbqvirfx (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in swcalcalh (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in southwarkssrfhack3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slq39369 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slnciguegg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slnccduioc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slnbxwiltsbk (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in slg99185 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sgjcvwjwwo (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sf727fc0 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in scaljan2momxm (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in sa6ed9cec3 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in oaithgxgwreb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in oaitgitxqgxlu (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in oaipmxktcwywo (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mvv10 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lf295q9 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lcalx1568287 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lambethxproxyabcabc (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hraq0 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hackysouthfetch (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in extfetchedwand1778555624 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in dlxprobe18 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in pretty-pino-loggers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f1b4c6d11dae72d82f4c6d856e9445f27cee3a1ed475f2043b5d7369aad48be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tme-xca-react (npm)
The tme-xca-react package was published to the npm registry by user 'click2ai' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the internal/private package naming convention of a target organization a 'tme' internal...
Malicious code in paperclip2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fbcfc445b1a599943dac3ca0691633629c6804037b38fcf6113062f6add848 package.json declares a postinstall lifecycle script that runs node -e code opening a TCP connection to 185.112.147.174:7007 and piping the socket to...
Malicious code in schemavault (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae0aa9efa2a8389cfe9d5c41d5ab3689f4965c945a24613493f94f9de033ab1 schemavault 4.1.0 is presented as a schema-validation library but ships capabilities and data that have no relationship to schema validation...
Malicious code in web-api-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ca2f8dce9e845346901818eadd06a0cda318c99ac3e059cd076d9f4065e2c17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @jacobtan/decode-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a99e8b0d7812c216410fc0ff557698f61a595d4ded8579c18fab63ab3ac8b924 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in robomerge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8f632bbc34b020f78b4dec06ddf1bc50194ce117dfe609484d05edc76d7790 package.json declares a preinstall lifecycle script that fires automatically on npm install. The script collects installer hostname, username, cwd,...
Malicious code in @marketfront/captchaservice (npm)
The @marketfront/captchaservice package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...
Malicious code in electron-orbit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7faf51a6c9d6ed9fce8cf9de9ea8afee0e9c3dc1fb254e8cd0c3c2a8ca61323f On require'electron-orbit', the module unconditionally fires an auto-prefetch pipeline in Node contexts when no document is present that opens a raw...
Malicious code in hardhat-compile-ethers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb9781577ff17698d2cb66a6cd832fe8bdda014b30c0c662055a45d42801ac1 The package's main entry dist/src/index.js contains a payload appended after the legitimate Hardhat exports. On require/import e.g. when Hardhat load...