Malicious code in iot-kfh-s3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d951dbac36ed1916b5dbff7333d074898752088132c2ec6e2b12fe223b835393 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lambda-cloudwatch-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 12706a5899ff9e1862dfc4ff260b38860415e8e68511e7e7f8d98bd5d6406e04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in automatic-octo-invention (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9601d13b646d0f31e4053a8f1d2b159cba6c30b1860a67da0baa3d7d7086d9c4 In this campaign, packages use names similar to popular services e.g. Kimi AI to deploy cryptominer. --- Category: MALICIOUS - The campaign has clearly malicio...

Malicious code in ml-core-airflow-auth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1b104d8446715fc7f59f0274ca3e655e6818b45edd837c24f78e857c917b2e6f Package presents little functionality, but excessive fake 'telemetry' module. This fake telemetry is used to download and run malicious executables. Code is...

Malicious code in your-unique-package-name1337 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in win-build-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-web3-v1 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-web3-patched (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-web3-lts (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-web3-stable (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-web3-fork (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-web3-fixed (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in solana-rpc-client (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in golan125-homepage-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in flow-eslint-oxidized (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in exodus-payments (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in exodus-checkout (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ecto-cargo-wk1tm59a (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in claude-code-timer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bytecraft (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in analysis-chart (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/signer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/deploy (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/sdk (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/core (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/contracts (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/bot (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @public-for-cdao/backend (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @irys-solutions/odesa-main (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @examplecorptest/hearsay-design-system-test (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/user-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/transaction-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/log-function-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/indicators-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/http-common-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/customer-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/fund-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @dxcl/account-js (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @azure-lab-services/ml-ts (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @atlaskit-internal_.smart-card/hover-card (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in my_shoaib_gem (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ike-artifactory-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in shark-e2e-bnsneo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mysuperlicense (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in mysupergoodpython (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ibreak (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hello-world-test-mh2 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hello-world-test-mh3 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in paperclip-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 643de4cab1ea2f7becbca5a7dead46fcb39f35596d2bf7a371fdd2c82ded1530 A clone of a legitimate package with added code that exfiltrates env variables and multiple sensitive files: credentials, dotenv, shell history, etc. Exfiltrat...