Malicious code in @rfewqa-fes/mnm-doc-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0495a09022e152fe8c13b9251497c56e333b58af6e54c412bfd43ff4503be1a7 package.json declares the sole dependency 'node-health-utils' as an off-registry HTTP tarball URL at a bare IP address...

Malicious code in teahy-znrpz-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d18143cb6c6ab53a6b224630d1b50f00578f4308414da4f384281a679d7861d index.js reads a numeric byte array stored under a non-standard bz key inside package.json, decompresses it with zlib.inflateSync, and executes the...

Malicious code in mock-data-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f3367976e89b052e26e44ddc41d0352391f24336e41a8d41687a0d4c7010e0 The package presents itself as a mock-data generator but hides a base64-encoded JavaScript payload across the mark fields of data/products.js. The...

Malicious code in fcefi-wdojs-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a00a17209ccc173a7196dd8e97486609819945db1459a5333463be9f6c20b9 [email protected] ships a loader in index.js that reads an undeclared bz numeric array 1000 bytes from its own package.json, zlib-inflates it, a...

Malicious code in tailwindcss-hook-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d504fed314f875b17a90d039af71b0798636e5030373e5d959871dc356bc7bef The package impersonates @tailwindcss/forms: name, repository tailwindlabs/tailwindcss-forms, author @tailwindcss, README, CHANGELOG, and HTML are...

Malicious code in strutil-helpers-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db7da8999828536292e11d09747504d964bf7525862de7d207d03c8809c438a0 The package advertises itself as lightweight string utility helpers trim/capitalize/truncate, but ships a 17KB Linux ELF.node addon, a 434KB Windows...

Malicious code in aurum-pay (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b0d2ac6f807a70e04fe3dc30654e40995911bc11ccaec948674e44e243f392 aurumpay/init.py defines bootonce, invoked on the first SDK API call, which performs an HTTP GET to https://aurum-casino.com/sdk/ping?p=&v=, reads th...

Malicious code in gloglet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27917e66263c4e6087c4b2cbbdc4fb8e8d6b13da3b40209da2a2ab99f4fa096f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chai-as-spy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64787b67d3c768f20c6657a4c4e0c11ede154d898d62e4b1bafc4028f3fbe4c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in verboset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a4093160dce8a65fe5ce463e8e166bbd21daf3f04a5d722a9133efb78a5d257 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aurelia-type (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 106679389edb6c05dcc60304b59b38fceec0641007040ef9a2bc500343a70d37 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in helmify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe77795db05a220f8f66f7fa5d0d7570323b9e86839bf073254cf49de206c31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in express-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01bc081b6433428f25c1ff2487ec9261e9a9bc0de174be268431d7c3339e60eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shraps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a490ee21191da673502cf8d36ab2a9011a3ed8c35fb5b5e7b563286643d6a9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ioredis-xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cae0a51364aaaf86a79b43a41760c31b2141b7e4c412b8b290ec41a888f3f0db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ioredis-om-typed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae4f7bdb64662971c5c06f815a43ea6e39c4a5858278af4e938e0739054f385 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cronbits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3197e96ef6ef9b4f31f6011f346c4732315fec513da72240d8ec4c4af469b0c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in textmark-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57d447410e77ecbc8e565ce77c7204640f06bfc937cce80b99cfa43d185adcb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in csvbits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2fcb242f6ee5ce5ee0d16ae2a7bb5374d17eb9f9e983883e92e6922145493bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in taskpace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 226b1ba3278805224b89b5ffee4e5cfa5de00214b8954baa87e7c89bba1e8176 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in jsonrail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cbf40768a5bf5e46a71d80aff2bb57827f0eef07ada07542c358c347b5936c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tomhundley/prismdb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1a64a795f64a9eb3b4c77fb6a4dc6ce3b10f089f6e67588a6c3b90fe0f22d4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flowbits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1c2953a6c580e0482ccc6d86f9ec4cec505800bdf3e2556a7d8584d604e1cde Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tomhundley/grafene (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5013b2a9104c46960df3cf911ba95230dc32cec7c011ac529ba524140263da85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pathbits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0829ff8923d3c848ba67ae064741353290ff7cc3f984a189b0fe0385eb998d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tomhundley/mypackagetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b54b162f0472b53354df190589cad77147e313297b09e74a1280f6d8e9f4eaf5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tomhundley/condux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 918d68d8e3d49a96a57f16c1777c683f90a0db5d0d3981de1a75104640f987fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @tomhundley/sparkdash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2f704f9e809f18566ad6778d26de8eeab8342a3e3bf4f7d1fd9ceb13ef1e976 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in correct-calc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5acdc2d413c5631f3fd8c1ce4442e9aaa50f794cd0359ac1cb8be9bbd55a5900 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cal-time-stamper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72abd3a6cebf27a3e1f35df7ec7d603d5df43879a6b528927d6fb331fa3d8906 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 0sec-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ca0694213fab27d0292d43aee954b81c13e551a81563903fb9afd7e54a9dda2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xsdsh-purge-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b0e622ecd67d042449c9c412990c54fdff64eee5df796a6f33ddf3ea46c8d681 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in humbility-shared (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ef2123979b9b0569b31e090e1b575bc392c7e40aa1367eed178147b4931c4c setup.py defines a custom install cmdclass PostInstall that runs on pip install and collects installer-side identifiers — hostname, USER/USERNAME,...

Malicious code in prettlog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9360f4fd522539accffc042d86ef137413d37ca411e10caf0546e5523c4649f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chalks-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0989c6b31e99988848556608782ed4e28d21b14b9360324463765752195636d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @solana-trade/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f9176979cfaf900e7e7daa2c479895c66659c6239842ae8c33a8fac2a76a090f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in termchalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b41f585c4e82520cf84ca20367823520bced473a6fbc03f50ab77c7c5bb83e77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kbmathlessons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d751bbc7fdf5dfe21c87f18a21fbc1a35c748605158ac6e36b2188989c1e1046 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yummy-bolts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0033b56430d000f0165fce7fa13288fe5c4eec20456e47076f76d52c2d456a53 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fadelsm/libsignal-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aff0386ff1ec2f5430a6ecadff8bcb770bb30ee67dfea1bfb8e22d702f9227a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pt-logger-telemetry-eax0x1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 858ddb3c9812cdc7939d412116506a7a4613611f13958f1a1fefdf91bfc299f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rex-react-diag-tools-v1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aed5165f50b2beb552e0472d6c4edaad82d46104ffe7f1c2e5ffebd9f0e89399 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in baidu-ti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b7e5e1d660ae08477b2cc28649e9f689a3e5a9a0edd3967d520468b1f70117c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in selectlist-polyfill-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 218352b39c5ccdb5b603c057d80cc73b3541309ca18aadb008f2ef2ed438ef30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hissakdx-wix-ssr-callback-canary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 478c6e8fb729d3310647b40d0dffe6530437f79106afbdaddbca8b924608f4d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in read-react-app-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 26e0edc20779ff037012127f0eeaf51de67c8f7b30ebe52d63866c6b4d476d83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in read-react-app-out (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24b1bf27fec55a13b65c23b917d5ef520f226d260222d74d4efe79f2911e7f40 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in read-react-app-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8949f2c689dac9e0a1dd63f41cfb03971981c139e04b4bd22ecd3b74cc6fc745 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in solvit-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b270954337a28d1b72f04e9bacc53c50aee3b15907ed8a3b4969dc486b40725 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @rclaude/win32-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd858623f60706d20738ee99009d20d9a2922472a9218d93df227dac1db66b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...