235849 matches found
Malicious code in desmosmathwork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccdafeec1f447c84fcca9f7f17e41c8e940b8bd65c9caf72b1bddbb2befdea4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in classhomework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef17879328ca7cff2fac02018b2155038da8e7faf071aa080d9c3272ba87a3d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in classlesson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5980732c2d869f27728cb78552b2adf259f87f10029674e2e84a4db390377c67 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in desmoswork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92541d82d133f0d80ad0e7dd4dc1595038f64af50558f26398c0a1c3627928aa The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in pleasedoyourhomework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c97c52ac22393718c1c8fd5478b19b5b352b1f8c01de5f2aa39e54c3305eaf1 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in desmoshomework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fae975f53feac57fc6aec90279e55e994d6e61d177217b012dfb59c6f42a7e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in superdupertest111 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84dafc169a0c96b769349ac7685ff37d6ad663db50df14862a784173cde38dbe The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in classroomwork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475464061a4252e9e926ad06f46e5b9223c8c0fc5b4921df5acfadbb3cacf8d9 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in ilovedesmos (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efb46da64ab0f3eaee41abecec08214a4af0f228c701fd39ad711c0ae124927 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in desmosistuff (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c61a3c57b3649dc23c3534ad9f8b872093353a38ed7995af9cda6d4102bee8b0 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in desmosschoolwork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9575a8846e102604d72f61d91f37c559e58d0fca4c117008257d096afc2a2acb The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in schoolwork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fab9688948b5e3cab55bea7282280a554f1e60f85b947724b5f9262cd6a1823 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in classwork (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8dab0502db54359ed8c53423750080abd441eae407040f20f205f5b0e10255 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in classroomhomework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64edbbd8d1e23d937c4697de257a67981be2ebb2934a4280424a86f4af7028f The package's index.html impersonates Google Classroom title, gstatic favicon, hardcoded student email [email protected], decoy schedule/gradebook...
Malicious code in sonsonsahur (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56e98f205b0c56ba4ee1948a10f1aaaccbbad4556e01569bfab9945ec8ad7e2 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in desmosisfire (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0679b40ac71c7b8ce0dc0557c8779a85ad10fac03ff678128ec4aa687c5e243 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in iwantaburger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660011f86e2c92f83c584ac25343cc8d8da3a4242286e751d9e8bc0bd8510a68 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in whatsgoodlookingbabycreed (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e598067256b5fe5407b1f8b201925a118b6a08ea19be59cc80db3c60082fe19b The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in desmosclasswork (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d435d8cefda2b58ca65ad06ffac8521a26ccb991dd4828dd479e64ddb38bb865 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in classroomlesson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee9290a110b32c6fab4129e634205ed0b86080ccf328dfe5e17635bc85b7926 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in schoollesson (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c019b72671bb34207fbc587803e391f42f2fd3148c3ac941d9a8cfc8468a7e8 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in iamhungryrn (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462bbc47c25a6f0d3de4221795fe1a35ea55027682c037d1a8ed8693b0993d89 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in tungtungisgoated (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d649ce9c915a5834ac0743a8f47377d31c293de34fbe40581c2f7ce3ca56c8da The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in tungtunggod (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cfc083fc4a77544ba957b1c1d771998929fc71453f905f6d9c474e2bd3fb51f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in schoolhomework (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207beec4a342cd3a46c5a21ea6b76c3e84e88374f40a76b6c5761859a76ea2c4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in digitalexp-style-module-l9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c1b3e9059995d4d535c65fafd0105eea420510acb17ad9befbc99c18aa25df9 package.json declares both preinstall and postinstall as node beacon.js, so beacon.js runs automatically on every npm install. beacon.js reads...
Malicious code in unifi-credential-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c9d5fc3394d6f2565267e1b19573ca0c58dbbe9149f7204ea39ccae5c53645f package.json declares a preinstall hook that runs index.js on npm install. index.js collects hostname, username, working directory, internal IPv4...
Malicious code in react-hook-doms (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01d746e2ab5362af396f0bafe921bcd6aed22b8321555ccb16d0f8f7a5c9183 The package was found to contain malicious code or consuming dependency that contains malicious code...
Malicious code in mongosooe (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in lil-swisgom-hlepers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75aeaaa8ef6f56423bf517d9ff21cfed3a682701f306103f068b948e330f03db package.json declares a dependency lil-swisgom-hlepers-core whose version specifier is a direct tarball URL on a third-party host...
Malicious code in leaflet-opencage-geocoding (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @medisend/shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5857b17f9935d83581e1a24e6d990211fe86631143c7025c3123d1274e7d28 package.json declares a postinstall lifecycle script that runs curl at install time and transmits the installer's hostname via $hostname as a query...
Malicious code in chai-as-mno (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e94e194f078c230d6c6b15efcddc54b133fd52c890a55b0f8bdb4c680452381 The package name mimics chai-as-promised and its README, badges, and license text are copied from an unrelated project pino, while the package.json...
Malicious code in @medisend/auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8363fc41a00733469f69df79f45ecebd190ac85d16d8cbdd48a61fe5bfb67003 package.json declares a postinstall lifecycle script that runs curl against https://webhook.site/74ed1be3-96d6-48c3-932b-6b1dbabaff97 with the...
Malicious code in @medisend/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18f32429d1bfdc9438f2f03f531e5c2fef53e0e69104e3124499cf6f42ce52a1 package.json declares a postinstall lifecycle script that runs curl against https://webhook.site/ with the installer's hostname appended as a query...
Malicious code in kelly-stake-sizing (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ca23e704ca44d185fc873044a3a967e06d996970f59a526d3390e1f0ab45a9d [email protected] declares postinstall = 'node scripts/install-check.cjs'. That script fetches a JSON config from...
Malicious code in openai-pr-reviewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3553acd3c5abc3f71b55740c4b06b2eb278f81bb678c55211f2287a498b60b61 The package's preinstall hook runs index.js, which collects the installer's hostname, username, home directory, DNS servers, current working director...
Malicious code in consumerweb-serverutils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04473d8096a27ae1cbf94652a0087dcf00762f2c7d1ef390bb351f283e743349 consumerweb-serverutils 3.4.3 runs a preinstall lifecycle script that on npm install collects the installer's username, hostname, and current working...
Malicious code in babel-polyfill-plugin-corejs2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13878d994b01607c379e26646449b7cca95099f9b2eb5be2e1f8e19aeea32eb3 The package advertises itself as a Babel core-js 2 polyfill plugin, but the shipped lib/index.js contains unrelated web3-core-subscriptions boilerpla...
Malicious code in poly-price-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219fd8bc805a260cc62a5a3f9d524f9bb69ba2f8c5ae65e9a13e64514fdd0cf6 [email protected] advertises itself as a crypto-price fetcher but its package.json postinstall script invokes prices-uploadConfigIfExists, which...
Malicious code in auth-otp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72292101c6b448dbaea5dc1e2af91cc55b35b32ee1e722c4f5b21dfb91e032d Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs node lib/core.js --setup as a postinstall lifecycle script...
Malicious code in remove-bg-serverless-azure (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbce8344eb0762c4a9ef029743efe13045422b839444b828c245a09a85fc74e package.json declares preinstall: node index.js, so npm install automatically runs index.js. index.js reads os.hostname, os.userInfo, the user home...
Malicious code in dim-hydration-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fefcd7c94e6eed5b5a69ce9ad5f4489c6532472ec604e6d15e5a96f63c59e51 The package is presented in its README as a set of day-math primitives, but dist/index.mjs runs a top-level async IIFE on import that chmod 0755's...
Malicious code in secret-key-totp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f662164281fe877686c7eac93e0e6d068ccb16f8bff1b44029b1ace655a76b6 [email protected] declares a postinstall hook node./index.js --setup that executes a credential stealer and dropper on install, and the same...
Malicious code in paypal-business-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556bfd93652f806523495944dc8a441624c9a2dae4f76eadeefa9650f57091a1 The package's npm preinstall lifecycle script collects the installer's OS username, hostname, current working directory, and walks up to 15 parent...
Malicious code in manticore-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c02a26613b94b15f0abe1ed108c7a2a7a061f795213dba4772876e6e0a015 The package's preinstall lifecycle script fires automatically on npm install and collects the installer's OS username, hostname, current working...
Malicious code in ppb-manticore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2558d8bae443d40330d8166eec921f02de17b395b4359a086a0f12792b026422 On npm install, the package's preinstall lifecycle script collects the installer's OS username, hostname, and current working directory, walks upward...
Malicious code in @gsas/gsas-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...
Malicious code in web-advertising (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c0c1f060691740d5149c61d74f3ddd8f6e10107c7621d700ae0819a1e2237 [email protected] declares scripts.preinstall = 'node index.js', so index.js executes automatically on npm install. The script collects...