Malicious code in atm_bmw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca0601b1d8613895ac524d33f93ab92365d464e80eb526e58e2ca919abba129 The package atmbmw was found to contain malicious code. Source: ghsa-malware 20fd437233c7e774bdca9f661a997a94bd0d8373866763c3638f9bc12c588c5e Any...

Malicious code in blobhunter-depconf-poc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6bbf9ae244466116ca709955328b8ae27867658e636ac521004edd501b38d4ef Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in blobhunter-depconf-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f921f8e8c11a044b483aa7c500c15b42917baa7ef4489b8301c564088fd4b7e3 The package blobhunter-depconf-poc was found to contain malicious code. Source: ghsa-malware...

Malicious code in telstra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e6ff467569b104f23ebbdc6ef58dec14795aaf14548185bd3b31886ecd9b8003 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in dstny-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b284da9586db3d25955c197277419786676841a572ee83eb99a463072eff3dec The package dstny-utils was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in ipvision-selfcare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 355639090b049714637ef2cba9b4ce6ae9661ba872dc9e1aec6a69bb28ae81f1 The package ipvision-selfcare was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in chrome-stealth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a97fed2b45bf12e5c4ba72089cdc2a1aff4ef42cb5eed242565268439946041a By using the package, the computer is attached to participate in a proxy network and share its IP and bandwidth. This is clearly stated, but the package has no...

Malicious code in qdatainstaller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e4ee574ced05e27b63477cb84af816e02ae259c67246f4f31ff63819e7e1048e Package is designed to download and execute a remote script, which then downloads and runs a malicious executable --- Category: MALICIOUS - The campaign has...

Malicious code in showdownxss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc880126bd2e6f146d20b5f0ffac063167334b69f8a27a8e39446e2aa60ab1a The package showdownxss was found to contain malicious code...

Malicious code in 511fola (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb9d65067967eb3823731d9beecb461b0746c872d8ba438280cbfa55e572eb2 The package 511fola was found to contain malicious code...

Malicious code in babel-preset-ibm-cloud-cognitive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d724269c7d6a4142b8a62d99d3e28073032dd4c6de68d5720ede18b020af4b19 The package babel-preset-ibm-cloud-cognitive was found to contain malicious code...

Malicious code in cc-double-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...

Malicious code in ent-file-upload-widget-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3fa37bcf44d315b1004c09b9e7c5d2089e62db393cec4a977fed97b12e3432b The package ent-file-upload-widget-v2 was found to contain malicious code. Source: ghsa-malware...

Malicious code in eslint-config-skynet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e73967dab61cd67b0f3c96ab2c059e3fc5405fb451c62165d429bfbcf1e3df The package eslint-config-skynet was found to contain malicious code...

Malicious code in identity-emitter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e21ae9a5babde61e78ed9c713ec2e845a44ac55b19fb0d9cd48561159bb16a The package identity-emitter was found to contain malicious code...

Malicious code in initializers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa9db2df654753e6f6ebb5f77fd9607441b642e1da3306fbf8a1909fb41c179 The package initializers was found to contain malicious code. Source: ghsa-malware e0374b8e7835a603949d751a91405b851c622bd8536d96cf80a9b092fca15c35 A...

Malicious code in jest-config-ibm-cloud-cognitive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c61f6f1f8814b6ae7678997bd33dda80b4570c54bfbd4f2c1c959c90059d539 The package jest-config-ibm-cloud-cognitive was found to contain malicious code...

Malicious code in kid-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc35802113ea5c7ac4e3d956e72af4ce3fbc5a9b3b8fc4c9d610d158d65250a The package kid-api was found to contain malicious code...

Malicious code in pkg1bate5apg1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c85b2d2c9cdcf5df7190e4771a4438616bc6f487b2f99d90f7de10346618886d The package pkg1bate5apg1 was found to contain malicious code...

Malicious code in tickncook-robot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca37d83d19175da5b3240e35b77605369a59fac393b51117458e1d852e2c86f5 The package tickncook-robot was found to contain malicious code. Source: ghsa-malware 69891529072c56796517d40db82d60db1d56f7a70c03567b4b9d7341d9125f9...

Malicious code in usaa-authentication-mocks (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a5999336978a30fd47577fe435eed35bf96e170df76a88933d137a64e5d2d0 The package usaa-authentication-mocks was found to contain malicious code. Source: ghsa-malware...

Malicious code in ent-profile-unauth-msr-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cccedcc6e7e3c24d5bf3abeb2d093bb12520a9973d6aaf7874d6559127e947c The package ent-profile-unauth-msr-stop was found to contain malicious code. Source: ghsa-malware...

Malicious code in fix-cc-raiesy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17aa6cbdc4986ee5b3aa8c4ea5e5a4dc3ddfc9f7d266bdde5f9d81445551cb73 The package fix-cc-raiesy was found to contain malicious code. Source: ghsa-malware 8e5d10de64ca997908f8b7ba463f0bc41b2553f4d883ab13b6e9f7a4fa5d387e...

Malicious code in datatables-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac14c14a0e1472b84944a2153607fa90a3d074098be58d2f6ffe586a5bf80846 The package datatables-editor was found to contain malicious code. Source: ghsa-malware...

Malicious code in orchestration-node-common-errors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d35f5a5c8b3e75118553234caeef3ebb1eb546d8a678904707d18ef47a16ab9b The package orchestration-node-common-errors was found to contain malicious code. Source: ghsa-malware...

Malicious code in @nitaiapiiro/rand_emoji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686999eb6a9720383d59bbca502497c33b67e49cd4f21b0fd3eba33d9be8aefe The package @nitaiapiiro/randemoji was found to contain malicious code...

Malicious code in pdatainstaller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 671a0098c14338197a26cb64b7f5c35c0e741f3151313fff784bc7a4862ad579 Package is designed to download and execute a remote script, but the script itself seems to be broken missing or wrong URLs. It's most probably a test before...

Malicious code in gatr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5d3d1723e01bd7a4d33591053ec24cde4369a19677874b25a7d73dfa4dadf46e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in ziphash (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e9a36a54bad10e0f086740a84fd0a837dd4bf1cc9c3c0707648af4bb3855a03e During initialization of the archive-support class, the package starts code from another file and downloads multi-stage malware --- Category: MALICIOUS - The...

Malicious code in queryservice-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 92aafbccc7065760e0127931c5150c59561f3b753ab9fe79dbcbdafd1aef97dc Dependency confusion PoC that exfiltrates also potentially sensitive environment variables --- Category: MALICIOUS - The campaign has clearly malicious intent,...

Malicious code in rules-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cd14651deea0e986dc2d7f9b11494d8c96a074ed9112aaa16076ea19b2b718 The package rules-playground was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in rules-deployer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849a58d27ed0090633a72330c705b5849146aa1493961574c6a11dc758e28e34 The package rules-deployer was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in common-cli-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4c7bdeaa334d938afac649a1c3195ff47bf6fef18168e78b61ad22c6252450 The package common-cli-utils was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in sfnt2woff-zopfli (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f372716a5cf92b41a37e0d7a83e287a41fcaca77b3cf9a324554c20a86635d8a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in requeses (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 60e475750b95349319dcce7f69afe6399fe78c271b772c001f7a01df5e1e7bba Typosquatting package with a Telegram-bot with RAT-like functionality. The code has been changed a bit compared to the previous incarnations, but keeps the sam...

Malicious code in @polystream/streaming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e62a67308730d0ecc50d157d59a1b39a5786f27c611739f3b02642211d3cda The package @polystream/streaming was found to contain malicious code. Source: ghsa-malware...

Malicious code in pyrogrqm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 02c3334952bcf80c0523b20a24f0b744463a944a4f3d18dc45a3f3c1bd00c1eb The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

Malicious code in telegreph (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cca72e5a6a205d657e13d29aee3f5448061afd17f222f11db168ef8a20744992 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

Malicious code in aiogrem (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2429ae6fbbf21c43b0bb5cc9a1ed320a2b7df0433adac380ec5902508727bc98 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

Malicious code in accesspdp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 11c8d523da4caf20e4a8a37285ab51a94173b2270777bb074878fdec62dee115 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in @vietmoney/vietmoneywork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59799baf7b8c7f94f2f2f6f4a87cfa9efbb6c8e4f480d2d234ed88264f6aed6b The package @vietmoney/vietmoneywork was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-action-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1a9f2c1ef7c8dd8ece133048315f8ab738a4d5d8bf1a11dbe5f932d39e2eca The package @vietmoney/react-native-action-button was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-smart-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7789664c2f8f3999c2d9294a538cac5a4ae536b37159d9246a6aa2ac4e2c0b3f The package @vietmoney/react-native-smart-page was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-htmlview (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82606664e32d7050a729171d5dac24f54950e90b7259a7f90a582e94632fcc61 The package @vietmoney/react-native-htmlview was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-smart-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdecb4163903c7cab6a325ea865641719253be69a34f76a172a717792a8b53bb The package @vietmoney/react-native-smart-gallery was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-image-transformer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d6e41bb857d4ed96776b54551e25a97efccd98d763659d945f9c969c7981cf The package @vietmoney/react-native-image-transformer was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-tags-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eaba1a91c6cb85d46db01b9c4e96157cdeb905c8c7d1b0d6b3dbd507a58f402 The package @vietmoney/react-native-tags-input was found to contain malicious code. Source: ghsa-malware...

Malicious code in landingpage-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d33042e8f056ce06ca8931599f3a0d11547dd6a7d11d2f74ecc0140bd247533 The package landingpage-service was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/vision-camera-code-scanner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e01bd6cc2d11eb6ddf080b713c76d97cd699ee78c903b01d3ef95fb2fc23356 The package @vietmoney/vision-camera-code-scanner was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-native-vnpay-merchant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7aa9187bf0ea16a7e5209406b93cd1b253b087a17bac46ad5cf79b8fa317f3 The package @vietmoney/react-native-vnpay-merchant was found to contain malicious code. Source: ghsa-malware...