Malicious code in coldcard-helpers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 127a096109f7b5b2bbedf7f6a9fc2e7baa706e93704ebd52615e744a9838fbc3 When installing the package or importing the module, code starts a background task collecting sensitive data, like sensitive environment variables, private key...

Malicious code in internallib_v688 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24366cd8d9efeba97d11b7059bf78a4aa103535133170742963ed6b57e4609b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zzzgenesis00/bip39-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cd50fa982c125844b76d3527f878bd6a171b497e86fd7cbcccfc56d22000da4 The OpenSSF Package Analysis project identified '@zzzgenesis00/bip39-generator' @ 3.1.2 npm as malicious. It is considered malicious because: -...

Malicious code in internallib_v524 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 986b1a9482ee175a6f6c9e70cf898a24208376a523e93277fdb72273fb9dd521 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in instalogin1234 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f6ed64b38b3e872668e1d36a02c53136da1ab70ec9dacd2ac3b7d38c31794ebe The package promises to be an Instagram CLI and offers "login". Entered credentials are sent to a Discord channel, and the user is presented with the Instagram...

Malicious code in simple-date-formatter-new-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 037638085662ef2cec04655349a528b60480aa642606d96eba158e62161b3a51 The OpenSSF Package Analysis project identified 'simple-date-formatter-new-1' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

Malicious code in internallib_v568 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee6d51dbfb5a2a8298a79b74b7c001e17985a1b438f9299a818a9c6c26e51e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beaver-ui-items-with-more (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bbe189f5c1de0f1dfa82a7b532b58ce8b91852acbba632a941a5f3281aafb4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beaver-ui-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b97a60edb5f178da1f1d6f0a672954c9593941bacb970c4ebee657fb766bfe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beaver-ui-date-range-picker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2478c242068e826d05e3864e3901a1419a0a8552cd987c08999483acf3940df9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accounts-final-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3119fb8dbf1b8a8b5c69c7fd4212673ce6a7d2c52c4fa06a7a498e97c15897f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bigops-chat-messages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a19c37cbb5263794904a0337d9f463e4d41a730e75bf8537b95e36becaa19bb6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beaver-ui-grid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c40687898fc74889bb778748b64a865b147f796c43b93fc903e715ee6017fbe2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accounts-loading-state (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0ddeec4da1eabc1035eb7097d83c9aa42f6d37c44a73e3c7b04ddd61d7d6635 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lifestyle-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 52f1fd0bbf2e98f9327c78d543a71fa9e8a1dfe5d0bd49366aa9d790f495b7df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in beaver-ui-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9811e6fb160c26593c5a92c4d8612648740b6240c20d300daa0bca6784a579e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-date-formatter-util-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0eb3042c51ca3c377dd9f4e814a53f4901a805271896f9bfd1619891be4bff5c The OpenSSF Package Analysis project identified 'simple-date-formatter-util-5' @ 1.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in tailwind-anim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 204592221540d7404642fb39488b1b235cf9f21b372558c196b404b48f3d7c23 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in list-issue-predecessor-dependencies-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f74d699bfc5fcf83c6f2864f93ecd41d3d9f8613f45f6bfb3b6dd5eeb7a880e The OpenSSF Package Analysis project identified 'list-issue-predecessor-dependencies-block' @ 99.0.0 npm as malicious. It is considered maliciou...

Malicious code in tailwindcss-anim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab2952f4dabc751cf85689160b2079f073f999b801ce9d59f08d417af7775232 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-date-formatter-util-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e2619c38c0a6e4c2bf346194ff3de102d18ef08ddd7c864c4470d17d62837b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-date-formatter-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 331277f77984c01034871b322154a0430093a1a087c2e3b48d18a4cd1c7254ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-date-formatter-util-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf71be7a588ae717e33fc9fe98c246a1037e8a38d385a18104a5c0fe8ff1f659 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trongriden (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfb2a16e0023940b622e66acf21c1597d4127d94fb730610f509960e49754c3f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in wacve-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 de96a68d25555c9ee1792a22b84307ba3bc68d1e012bd841454dc775986260cb The package contains encrypted code with infostealers targeting Linux and Android execution under Termux. The encrypted code collects files, browsers data, tex...

Malicious code in @custombots/custombot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 07c87d7c1e7e788959af6de895c76293fd0922dd1a422da325962de7f8d3d19a The OpenSSF Package Analysis project identified '@custombots/custombot' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in pp-react-worldready (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6a0cb104ba7e29ae2e20cb4d191f5a1cb0a74de3a26cc06e9e6369d5bbee94e5 The OpenSSF Package Analysis project identified 'pp-react-worldready' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in nvtorch-oot-nightly (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0f81b904b849df393cbe5c34f952af65d8b28e0797e33d62cf964df77d4929c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in trtllm-subdir-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e8cdbb30c1c2ddf88a76d18b935d4accf68155f936b5df59a8864fafd7f4e06f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in test-dev-boot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cb67b63654219a5c04c8be6821fe3faad301c009b20e558f3a17aab0b85ef97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-host (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27cded0e4f6f17de980e65abefd0ed8b4a24a7f817e8a8506492d4ed87d5ab82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-watch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware db85a6a548238053a85ec4851a41b50b3e501d57ac56043fed21d711c1110b4c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-dispatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de211ea2269bf67da36abb6fcfe56f92c6d377246a30c7c1c878ba746a26e65d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5052acf8653a95208115bcc91200c36bb581aa75d1b6d27b3f2a0ec7a6a80de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 753c40af198c777d7248e2e3f9c4df1ffdb26e7acecb35a05c76c38dfc07bc74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08d84ffac131c96846518a7d31bd752bf3e3f87cad1e79383458b24f489d0140 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-dev-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0ff9d18c9f39aa3d29180ab72b815c93f9bdd7c9b22a0ff0dfd255bdf1319eb5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @moxfive-llc/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4880022b8afb155703691d80f8558c09be4262e4fa12064a2faca2607a3679b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @spending-behavior-ui/widget-insights (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36bbaed8e8bd830b00f14eaeb532fbeeb0d581a806dbdbca220ab006b1adc958 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @spending-behavior-ui/cashflow-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4297e338304a9686d295320c60149b746f9044b0cc158fc6743c670965f595fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @global-theme/context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48962d911b70fd09f4c001b44b879452dda607f877256d2f85d64538912ab7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fuji-web-components/maps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d5e567a52783d2e684e1da23e3d5804652801f44f643834fcb30cea6bbab732 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mplay-frontend-ui/link (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6f2d06b568af724d0c5db157ecd8894e51acca5e9f1ae3d965ca5775afe852e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @one-chat/react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c7db3f85373ec3f62997e6019402e390ab07d37ef0f129fdfa168b9503da7e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @nordic-dev/linting-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0054a3ea54efe5ff365eb71e92db7d2cb4e92a63854489c148660a82d083c16d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sw-commons-components/message-upsell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee504d58bc907a09044cba70345cf7bc8cf2266c20833ce8bae2866b205208c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @finance-ui/finance-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b752ae2cd0e6a1f9faf2b0c3376aa390e9708b86705621087e72e95de4333448 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mplay-core-lib/utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0eddb6f3032b394543236ca6a9378654e0d657ae7c80790126b90be036019607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @sof-assistant-fe-lib/vertical-faqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d1ba538ee75936802bcb54b49dd258a1941bf7b9f07bc0b05db81fd656c47e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @meli-testing/jest-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a676fda55082dfbd3f6cb792419d9e7156f49a8c587526a37edf9cb09f535d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...