Malicious code in auth-otp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72292101c6b448dbaea5dc1e2af91cc55b35b32ee1e722c4f5b21dfb91e032d Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs node lib/core.js --setup as a postinstall lifecycle script...

Malicious code in remove-bg-serverless-azure (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbce8344eb0762c4a9ef029743efe13045422b839444b828c245a09a85fc74e package.json declares preinstall: node index.js, so npm install automatically runs index.js. index.js reads os.hostname, os.userInfo, the user home...

Malicious code in dim-hydration-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fefcd7c94e6eed5b5a69ce9ad5f4489c6532472ec604e6d15e5a96f63c59e51 The package is presented in its README as a set of day-math primitives, but dist/index.mjs runs a top-level async IIFE on import that chmod 0755's...

Malicious code in secret-key-totp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f662164281fe877686c7eac93e0e6d068ccb16f8bff1b44029b1ace655a76b6 [email protected] declares a postinstall hook node./index.js --setup that executes a credential stealer and dropper on install, and the same...

Malicious code in paypal-business-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556bfd93652f806523495944dc8a441624c9a2dae4f76eadeefa9650f57091a1 The package's npm preinstall lifecycle script collects the installer's OS username, hostname, current working directory, and walks up to 15 parent...

Malicious code in manticore-log (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184c02a26613b94b15f0abe1ed108c7a2a7a061f795213dba4772876e6e0a015 The package's preinstall lifecycle script fires automatically on npm install and collects the installer's OS username, hostname, current working...

Malicious code in ppb-manticore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2558d8bae443d40330d8166eec921f02de17b395b4359a086a0f12792b026422 On npm install, the package's preinstall lifecycle script collects the installer's OS username, hostname, and current working directory, walks upward...

Malicious code in @gsas/gsas-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2242b683433d5fe37b3997185d251799a4606a456e516da08586775d11f0cb7e @gsas/[email protected] is a high-version public-registry squat targeting an internal @gsas/gsas-sdk name. package.json declares preinstall: node...

Malicious code in web-advertising (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c0c1f060691740d5149c61d74f3ddd8f6e10107c7621d700ae0819a1e2237 [email protected] declares scripts.preinstall = 'node index.js', so index.js executes automatically on npm install. The script collects...

Malicious code in @yuva2210/htx-poc-skills-rce (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @yuva2210/okx-poc-rce-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1917fdda46d566300463afdd1087755e9cf50203f4997455f9ee888e01782124 @yuva2210/[email protected] is a dependency-confusion proof-of-concept targeting OKX's internal namespace. The package's package.json declares...

Malicious code in @x-team/strapi (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in svelte-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f522350f40f35da150be92840f6a3cc1283b8e48bc5bfd95a114d7b2282dbbca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in hydration-ui-dim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9565680b71c54ed88e29ed3950f1561764f4b86a260a3ebb5eadb528edfa3 On import 'hydration-ui-dim', dist/index.mjs runs a top-level async IIFE that chmods dist/internal/calc-math.dat to 0755 and spawns it detached via...

Malicious code in hydration-dim-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16cd04f35f684a64b6abd8178154fc7d1f5a970c76f7d77c45635c1c3bcf0d9b [email protected] presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import time: it chmod 0755's...

Malicious code in svelte-dim-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85c60ad2ca0f72057dc31af7e017b210304c5dc1927872717d331ecf391bf8f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in @pimy-b2cweb/common (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @pimy-b2cweb/apiclient-common (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @ice-trade-components/common (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @grab-food/order-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b56bb1d69dc16b6095faea196af99809ad805b400a3c6b5499f896c8d74c2 Package published under a scope impersonating the Grab food-ordering brand with no real functionality index.js exports an empty object. Its sole...

Malicious code in @cawraytestorg/packagetest2 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bpa-internal/bpa-utils (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bpa-internal/bpa-types (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bpa-internal/bpa-common (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @bpa-internal/bpa-auth (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @b2b-frontend/store (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-smart-pkg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-smart-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-smart-hub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-sharp-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-safe-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-quick-hub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-pure-mod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-pure-hub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-pro-tool (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-pro-pkg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-pro-kit (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-max-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-max-pkg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-fast-rb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ultra-fast-hub (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-smart-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-smart-mod (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-sharp-pkg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-safe-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-pure-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-quick-box (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-pro-sys (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-pro-rb (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in tiny-pro-lib (RubyGems)

--- -= Per source details. Do not edit below this line.=-...