Malicious code in pretty-log-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cf3997d4939c8ae652092b7dea0bc0dce0bd03eddf1ea5331380fad3b156f74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logform-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e18f24df37ad0cd0ddd311e006738521585804f186b83c814cbbc3af20aecff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @wbnr/design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dbd908eecacbb587e9534c244be33296e6fa11092200cba8428351bb66afe844 The OpenSSF Package Analysis project identified '@wbnr/design' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in react-fast-refresh-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 099a09ef3c31cb84f4c5513772b1ea1ffc63e2f8767cb0b16a79399137a2ef7c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in phabricator-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1e92e5b2c5182be4ddf6a9acced6db4e6bb3c7413970c931b4abd47910b1bb26 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in litespeed-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30b539f8867796f9cc7c4d94a80524212c3873c85d15c5294d4bb144d2c1b177 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in n8n-nodes-trust-me-im-totally-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bd22982653509931d8154fc00793d03ae037f78243500c749ff4f6c1274e73c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ai-plus/de-agent-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d124a211b34fae316341f17eee7b998a707e549691b9241d72289b4961f2aa12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ai-plus/de-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4d50f0cb1eb732ea83ae7a1d6ac6b1c20aef7005b9aaac240d43b18a2d0dfe07 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ai-agent-node/nodesql (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9bd9860fa6b32249720b90f9ba4f48642cbd746fe04e701b05cba6eef2951671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ai-agent-node/createnode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15063f5f6ff98d0548679dae95a71663a9e4f23d4258bdc1ab4de85f127bbb48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ai-agent-node/agent-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8edd22e8454df2a9c10d47ea5c39560f9384598e7fb2a26b26b8f647fd5d2dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zannstore/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b310179032a3c10c00d359e9152740aa830a1d9d5ea97367f7b8b4d6d1f42569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @peptide-unit/peptide-modify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb7e60622db920ec76a66f57eece80bd26a76350da5741c446c1a50180a7afff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @peptide-unit/js-unimode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc980d78557ad1dbd4c8b74d0f383ce26d360c48ae860e05d1685c7ee1dd847d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uniapi-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09d612d64d0f85043a8a38f0098a520182eada4e67046bdff3bd6bfd8bf150e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in colder-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd07744737c9b6e9ee846d8a15610b53170c6a0fa0937c00251d4b87697bea57 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in def-open-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e2ab83557d19fac6db95041a0557305c6950f0c181a3998767dfaf011fc02c2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lzd-unified-station-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a7aa719b42fefe9ed02663e521da72cb152008b0db0be8a186524902059c590 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lwp-web-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f48a24eac1771fb54fd93711a3e41754360ae043cecf84fcff3c3d1bb30d297e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flight-compare-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc2dd463956db0c56774e8da768bd425fbd36a855f2e7d820390bf6c664ee395 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-skill-zip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90b0b80c790dd0c39844830b06e5388141ddc9a78aa8e79510cb6cd148de1a63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in feedback-ai-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63f8f94529e580af60ba47ff5cbd40e7bec956dc203a4d944fdfc312a161b75a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in open-worker-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f401caae6648708b54670a92075c2ff4fa6fb10f86a7ad73be5fa19eacae2fed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aone-cloud-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ac6b6dc6a9ebc0c474150ee0d6545f6c3fa790ada20f247ac997ec504ce6ffc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zer0code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c32ce60d9046922be517ee944ce40573a0679fa0dcbef26fe8d97916281ffef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @finxsecdemo/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6ca8fa85d211056af32639b18f95f13c362b2764d85c812e6741d6747abf94d The OpenSSF Package Analysis project identified '@finxsecdemo/utils' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in test2221 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 178c9841a69c4a2de3ad248f8d4dbba8f004c8e8947a34f9e6ae12404183e6e2 The OpenSSF Package Analysis project identified 'test2221' @ 2.2.4 npm as malicious. It is considered malicious because: - The package executes...

Malicious code in chain-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 244bd34fb32f0ec506fd4453e6f76aa449778c670324f156ab3f2ef35c6b4de3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @bowozzz/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5a0f9d286871016613604a770135c19922be4f3b7005cf52276e5258a7423a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @mypwn/hawkeye (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc7070d4697e41f7bd953772681425e677c8ca9539144154b7abde925adef545 The OpenSSF Package Analysis project identified '@mypwn/hawkeye' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @types-beta/sdk (npm)

The npm package @types-beta/sdk is a supply-chain dropper that impersonates the trusted @types DefinitelyTyped namespace to look like a routine type-definition dependency. It bundles a Windows executable vendor/nanocache.exe and launches it as an import-time side effect: dist/index.js calls init ...

Malicious code in @joyfill/layouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48d31efc1aa4ad0afbb16e357a08eb80ab4c39bca8dab1723ead698363e0edc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @joyfill/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61cf3fd63a92e5d2f5ffdbc70713656d7b347072c046aed9e9ba65fbc7c1e76e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in postcss-motion-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35e5cd51d2131c9af1800f9ece6bda2d695d523a36394222e10bc88554e7c935 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aone-kit-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4197cd1713e045c09d745c2d3b518df40d695112f76831bd0e921031cac69606 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lib-mtop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1dad2a69d97f4f14b77fdb334f860745feac703828131718a950a54b2d7cece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in local-config-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa2dd509a9d17ced72d7119cf68768f7356d3f67af131e9cbe5bfe981a626ac4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aone-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8c02fc6bb23600ab64d77ac8f4d615fcf128010f26df033c40ed2dc2476b9ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aone-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb48e61b0c82bff5ed26f7afb8cfca9248ffe0a256db4bd9fd2e47b757e7784d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cloud-config-fetcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a19fd2daa8759d7f8a31f0b54cffd70e5769e2268a447f8ba0b890006edee17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in smart-config-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c23d349475bd923bd4f57440ddd7c07bbfb8b93b746788ecb4b8cc87e1ebae0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-probe-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0457a026ab28fbb641d11e4e9ac9d60d026fd77210972f72e6ac931b4b06c59c On npm install, postinstall.js executes shell commands that query cloud instance metadata services AWS IMDS at 169.254.169.254, plus Tencent, Aliyun,...

Malicious code in korvica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 065729796ad9ceb2c9939587ce1f61b78bdf36fc13807ace7e2383c22f5e61ba On import, a top-level async IIFE in index.mjs gates on process.platform === 'linux' and NODEENV!== 'production', checks for a WSL host mount at...

Malicious code in streak-core-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf01d1216cca4dbb1b7da58b70a710d7d04bff671d2889f8ca0d7837633dec34 [email protected] presents itself as a 'day-math primitives' library, but index.mjs the package main, executed on any require/import contains an...

Malicious code in vtranalytic (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebce016051a9e9cb604067185042ce49c7426aa1ac01aa606e430c4d1120eec7 Package implements a Telegram-bot-driven remote administration tool that gives whoever holds the configured bot token full control of the installer's...

Malicious code in color-convert-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ede9e30312b6e32aeb2a3ed39042fed67db7f1cee50591f906a228f61673ef9 The package's postinstall.js runs automatically on npm install and executes a shell pipeline that collects host identity hostname, whoami, id, sudo -...

Malicious code in json-schema-inspector (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023b104d04c30fccd05f5db5842a2d8735c572eb13cfbb5ca7ba763eeb525429 The package advertises itself as a JSON/XML schema validator, but both public entry points validateJson, validateXml in lib/core.js invoke a trigger...

Malicious code in bianira-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a775549df738e414db9982a4695da893427c09ccc63cd520917c1b73476f4336 plugin.js the package main contains an appended top-level IIFE that runs on any require/import of the package. Every network-related identifier...

Malicious code in streak-core-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 073175f6a0065dc5cc00d30357053432c69fbc7aab8b92bbe4217ad3d54c5d3a index.mjs executes a top-level async IIFE on import that fetches https://f004.backblazeb2.com/file/dp8hbvocjd2fpza/helper.zip, unzips it into...