235855 matches found
Malicious code in paypal-business-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556bfd93652f806523495944dc8a441624c9a2dae4f76eadeefa9650f57091a1 The package's npm preinstall lifecycle script collects the installer's OS username, hostname, current working directory, and walks up to 15 parent...
Malicious code in manticore-log (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c02a26613b94b15f0abe1ed108c7a2a7a061f795213dba4772876e6e0a015 The package's preinstall lifecycle script fires automatically on npm install and collects the installer's OS username, hostname, current working...
Malicious code in ppb-manticore (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2558d8bae443d40330d8166eec921f02de17b395b4359a086a0f12792b026422 On npm install, the package's preinstall lifecycle script collects the installer's OS username, hostname, and current working directory, walks upward...
Malicious code in @gsas/gsas-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...
Malicious code in web-advertising (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c0c1f060691740d5149c61d74f3ddd8f6e10107c7621d700ae0819a1e2237 [email protected] declares scripts.preinstall = 'node index.js', so index.js executes automatically on npm install. The script collects...
Malicious code in @yuva2210/htx-poc-skills-rce (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @yuva2210/okx-poc-rce-impact (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1917fdda46d566300463afdd1087755e9cf50203f4997455f9ee888e01782124 @yuva2210/[email protected] is a dependency-confusion proof-of-concept targeting OKX's internal namespace. The package's package.json declares...
Malicious code in @x-team/strapi (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in svelte-ui-dim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f522350f40f35da150be92840f6a3cc1283b8e48bc5bfd95a114d7b2282dbbca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in hydration-ui-dim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9565680b71c54ed88e29ed3950f1561764f4b86a260a3ebb5eadb528edfa3 On import 'hydration-ui-dim', dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-math.dat to 0755 and spawns it detached via...
Malicious code in svelte-dim-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85c60ad2ca0f72057dc31af7e017b210304c5dc1927872717d331ecf391bf8f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in hydration-dim-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b [email protected] presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's...
Malicious code in @pimy-b2cweb/common (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @pimy-b2cweb/apiclient-common (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @ice-trade-components/common (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @grab-food/order-sdk-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b56bb1d69dc16b6095faea196af99809ad805b400a3c6b5499f896c8d74c2 Package published under a scope impersonating the Grab food-ordering brand with no real functionality index.js exports an empty object. Its sole...
Malicious code in @cawraytestorg/packagetest2 (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @bpa-internal/bpa-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @bpa-internal/bpa-types (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @bpa-internal/bpa-common (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @bpa-internal/bpa-auth (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @b2b-frontend/store (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-smart-tool (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-smart-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-smart-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-sharp-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-safe-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-quick-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-pure-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-pure-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-pro-tool (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-pro-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-pro-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-max-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-max-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-fast-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-fast-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-smart-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-smart-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-sharp-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-safe-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-pure-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-quick-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-pro-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-pro-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-pro-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-max-gem (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-max-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...