Malicious code in doordash-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2c2fc3e4bccd347a784ca9271e03d26dcc7e89c2e697f9e04b2e1e26cfc80d The package doordash-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in snapchat-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80100098d97efb3e0e143ef48523c4bf1724d39fe46eec08532a084d22ef911d The package snapchat-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in linkedin-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087523af82d7438462bdf269292570db2114097ae1ee24979225379641e15f6 The package linkedin-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in sentry-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b344e30280f8d412e7bb23ee828cea19637206f94ef992a20c372957c53b32 The package sentry-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in hilton-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f865ea8e9dc8af2f134e9b7fc318eceef8ff54af8fc491d1feb2d2c5788441f4 The package hilton-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in instacart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e2fadf49fd1948b4d1d7049083d559cfdaec04a7247f1355729b1278b9bd3e2 The package instacart-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in uber-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb767de450fdafc6d2aa88f77a1f0a95188ddb866565c91258711f3434ce561e The package uber-ui was found to contain malicious code. Source: ossf-package-analysis 9706819391825d94f76cf6530978ae5e88f3a58ccc386090ef6523825393fb...

Malicious code in @eagleview/ev-mapviewer-interactions (npm)

Package is malware. It exfiltrates sensitive info, executes arbitrary code during install, and matches multiple YARA rules. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d7da79dc7cea55b1c51c17952322ec30f3d03000a7b075252e9f74084a7a06 The package...

Malicious code in o2-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12445272ee24c376909e302bc2f4fe2c23af7aae5479ca74493a57adcdd4f028 The package o2-modal was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-react-router-legacy-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d31fa6c9b6cd0a9e87216ce93110698b49f1fede30d3f090902284a5153613 The package airbnb-react-router-legacy-v3 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-react-router-legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbad26f42924fe90947efc559b87354b3cc495e2aad542844029ebfe7d0ec3d9 The package airbnb-react-router-legacy was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in wishlist_dropdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96af5d4cffbd1a2bb13ecd403b9acf5e0fe62f6df151c6b511f556c9c0a11c31 The package wishlistdropdown was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-blueimp-file-upload (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e31d7485138d523c3fc40982b857b4c758f73f46c1bd66952aa2f877625b480 The package airbnb-blueimp-file-upload was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-vermeer-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d15f2b16fc6904b39ed8ae073822dc4a01bf2613ba243b3c2787740dd3cf2fc4 The package airbnb-vermeer-node was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in o2-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3630b06db650613bea91129fed49f12bae373b86c45a215fce251a86d9d391d0 The package o2-tooltip was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a37ecd19e914e8801e6398f69fea68500fc8c985d6bff3dc5613aaf0ea09692 The package airbnb-phoenix was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-story-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ee587585b5d6ce7a559b01b7ca42796dcd026647cce38e2056a0893bd4c7429 The package airbnb-story-constants was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in airbnb-luxury-messaging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3721ccc0b94a8795edd99efa6ea640102c705346c6270a7ac203911797eaa7e The package airbnb-luxury-messaging was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in voicemetterr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96387f13bb167829d9ffd47e15174e794c9a0a0922ca411c2b5d67f33725d769 Package sends image files to a hardcoded Discord webhook. It requires manual start and expects user's interaction. However, the package clearly impersonate a...

Malicious code in optly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0772e230f188de88a82becfa6493f2c39c36e63290339595308366a84154a56 The package optly was found to contain malicious code. Source: ossf-package-analysis e70192025ea0e8c030d0adbe15f6c3272271f3b25cb13eedfb8136da48c9a29a...

Malicious code in @vreden-team/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fed39a318dda2a4b76dc12030fb47d54a1a1b36c7a8186f2eca1ae6bd908d23 The package @vreden-team/baileys was found to contain malicious code. Source: ghsa-malware...

Malicious code in kdewebhelper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 da8701a407522875f63d2aaa28d27194fe8e2faa4d7782fd66639f224ae62dcd Importing the module connects to a Telegram bot and provides its operator with abilities to execute commands, exfiltrate and encrypt data. The target group see...

Malicious code in @ra-ide/udt-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e7622a4fb5f78043c8f52ad78fb036d26fa8ae041f8d2d21f82d4620894e14 The package @ra-ide/udt-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/extension-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a7aa2bba6ddffad751c19fd8291861f53b9994814f0cecb8925b7c2d5c87ae5 The package @ra-ide/extension-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/system (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce07a8994cd7d28965c3fdec8cba35203da851f19964d8ae6e2be5f754a8132 The package @ra-ide/system was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/logix-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0e9dbec30cd8b41d8e4b83527959c2b2e24abd51fcdd958e18ead57f3b4bf0 The package @ra-ide/logix-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/source-code-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b026a3f908a4875695a81716cd5056c2991f150b9661187eeebd42cdc8577b The package @ra-ide/source-code-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/tag-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c33209550ea4f214f4a53a91ca86598ef1ba273d7dae04de11effd081d8cd75 The package @ra-ide/tag-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/st-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ae7d07061ce406d972052f23649e631bb22f724cd85c8ab0c73b18689ecb36 The package @ra-ide/st-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/code-editor-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39784fd9275723725034c0f9fcb2df35d06963659572a3aeaccd51e3a5e07e61 The package @ra-ide/code-editor-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ide/ld-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec551eb9431424b0e79cb127427880ebd5c21b9deb2b8d4a378fb650fb45a84 The package @ra-ide/ld-frontend was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ftds/motion-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dda61891bfe950e0374d30755261789fcbee68353f030c03bb4129f9f62a4f The package @ra-ftds/motion-extension was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @ra-ftds/ra-flourish-design-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72b65d4ce1abb0b35aca62b21968c19b6e8e99ec60962be31a4179ba5f22bec The package @ra-ftds/ra-flourish-design-tokens was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in peptest2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 60249233a6c88847f2043da362196e4b2652bd7dddb8dbfe92cc3e7b2b2676a9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in peptest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1230d903d5782f1a6d2d779ada368260f2c32d9e4f74bfd3ddd8f4df9c570572 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in siitoogether (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6fccd687f1acb55e6da0782b08ef14b3e8be5587dee4743a163a106c48390a50 Importing the module starts an RAT-like process capable of execute remote commands, with the C2 through Discord --- Category: MALICIOUS - The campaign has...

Malicious code in alicenpmpocpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158edf3777a6df259583332b3694508454333d6643c7eb04eea85176ba9df724 The package alicenpmpocpackage was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in expertsvc-onboard-offboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6d7a1267ed4ecc6a46b548be6778e2f198c0ec5629953d3e9e6a79e1f213df The package expertsvc-onboard-offboard was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in identity-authn-core-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db734e79e178dd70b53bb814581620da1604a06da4967555160d7dfd0d14e0c5 The package identity-authn-core-ui was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in @kiwiiw/ez-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f5c041881bf0c4fa9609a55549447c4edf120f50bd70b30b8f71a9d9814f371 The package @kiwiiw/ez-lib was found to contain malicious code. Source: ghsa-malware 93b9fad273c843b3194e657cf9d54441b5beecba505b2c72db555efe226ca2a6...

Malicious code in com.unity.polyspatial.xr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f47a6bc79a20cf499736b6544281ecd6035fd1135b3d465ea2b7579061bfc2b The package com.unity.polyspatial.xr was found to contain malicious code. Source: ghsa-malware...

Malicious code in just-a-calculator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1b3b6dacc63b42851c61ae55e5168dbd9ff40172851cbfa980f489da54826f7 The package just-a-calculator was found to contain malicious code. Source: ghsa-malware...

Malicious code in node-calculator-fa00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4262c0c6df0bff5c948bd56a719c0cf2d00aaf9699bb1c4a7367e6054ff72844 The package node-calculator-fa00 was found to contain malicious code. Source: ghsa-malware...

Malicious code in lululemon-b2b-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05944949ea944b00cec776df6ca73a7d3cdb15f30d578047b75225e8c04cb45 The package lululemon-b2b-utils was found to contain malicious code. Source: ghsa-malware...

Malicious code in hellospa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0582933888e4badd81ead15c78b68f8de23a0c728b5a1584f737bedcfd569184 The package hellospa was found to contain malicious code. Source: ghsa-malware f4e9282a1da51cf6409a4e5196d718d73e8f6f8dbddd339cbdd0535658517576 Any...

Malicious code in node-calculator-cf8c (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da96ce055040828362e8a000e3ad2e1a1647b7d3faa0c4383c260d6044bef7d The package node-calculator-cf8c was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in sitoogether (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09dd85c25ad8d35e40f8afc89c4a7f0322beb48a72db826b13c2142810460ac9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in alicenpmpackage13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4183158dd9ab68784bc126821795cf166b7f2c828d67f46efc533d3859a4342 The package alicenpmpackage13 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in alicenpmpackage1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6f807461a8da92854705819f1e63af5d1951c52d255a565e6d70c4b5a21fd3 The package alicenpmpackage1 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in jeronimoekerdt.color-picker-universal (VSCode:https://open-vsx.org)

--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 5e1b0ef4a151e758eadda67d487723883b42f68292fd4dc8019068838e08faa8 This extension is malicious. When installed it runs an info stealer that exfiltrates user data including credentials and cryptocurrency...