238695 matches found
Malicious code in mega-quick-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-pure-tool (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-pure-gem (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-pro-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-pro-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-lite-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-fast-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mega-clean-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-smart-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-sharp-lib (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-sharp-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-safe-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-safe-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-pro-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-quick-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in hyper-lite-tool (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-sharp-tool (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-safe-hub (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-quick-rb (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-pure-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-max-mod (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-max-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-clean-kit (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-clean-pkg (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in giga-clean-box (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in circle-w3s (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in py-devoli-common (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a1bb1bf9c4c225131c5ad323e7b0c1a9f29f34aea30a496ac77661ea05605d The package was found to contain malicious code or consuming dependency that contains malicious code...
Malicious code in dotish (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2ccb1a1f0c28d673323f0377c9e65232611641c9de3dbb97f92b17779660b20 The package's postinstall lifecycle script auto-runs on npm install and reads the installer's current working directory .env file typically containin...
Malicious code in dims-hydration-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a85d660f6cc363a81624c7383318958bb46f2d6958fdad71e595692420d805d On any import 'dims-hydration-ui', index.mjs chmods 0755 and spawns a bundled Linux x8664 ELF at dist/internal/calc.dat as a detached child, describe...
Malicious code in dims-svelte-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bad5399590f49863bf42eff11c2a4c9f22c7db3dbc91d710faa0dfc732f02a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tkyoussef-hb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf8b5edde28ed5fd92096c6a23ffb5ff8ec8272b6b52ec52c49d9cacab79ee69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @elc-online/up-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e659619abda05c9d3835997471d962784e947fd65960e24146082b596d015d6e The OpenSSF Package Analysis project identified '@elc-online/up-analytics' @ 99.99.99 npm as malicious. It is considered malicious because: - Th...
Malicious code in livemcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80caa46e4bb231b0640c11ecb691ccf936f316205010487c57178eaf2100e8f7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @deepaksilaych/sess (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 486a9635e8c6469e065bfaded0d14bab7fc929317cf88063b1b9a26b568c863d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mcp-real-chrome (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952bd642bd2f2aee3fd768385ee5d8dd3d5b387c7a9171e8ddcb8983f3499d2d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in react-dynamic-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42a28d8e2db013cbd481bb7864f1ff983b95554d94bd4a3d7199d37899f46550 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @medisend/webview-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf4b396c306b8f8d090b929c265b8ae848c75e53b9750d6f68800a4deefe9a2 package.json declares a postinstall lifecycle script that runs curl to https://webhook.site/74ed1be3-96d6-48c3-932b-6b1dbabaff97 with query parameter...
Malicious code in dpg-media-7ehemel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a904ad03d7041e21fe41a101c6a2db4a6aa3106f7b36394208bb4a5a39ee594 npm package [email protected] executes node index.js from a preinstall lifecycle script that harvests installer identity and environment...
Malicious code in msrcpoc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57de2918e25798c84b17d6a743fbadb99a5e564b8ea34e1ab5d4a0ff6d509df0 The OpenSSF Package Analysis project identified 'msrcpoc' @ 99.1.9 pypi as malicious. It is considered malicious because: - The package executes...
Malicious code in @temptation.js/utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8ac41747a5c926627c28c9f1a651df91cd3447b07ca4cafabc1916004d1e70 The package registers a preinstall hook node index.js that runs on npm install and harvests installer-side data: os.hostname, OS username, home...
Malicious code in dext-crate-image (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e581bed6c9028ebf84b341f914135c1af62bc9b75072f1c511c4c187cb94abfd The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in dext-crate-check (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 329047f71cd6b35084bea7ed22978ba88e02cb557a5490b6133a70a5a0859a19 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in create-json-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8ecd294b2515f40dbcea497a8a597797b26ca773d6944a3f207249fbbce503 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in dext-crate-video (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3becb032c5eb2c6055f81b9fc5dbd5d5c517d1c4028810110bd1b202ec4742e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in polis-diraja (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71e55ed5112c3eba44560867e4b882d6c0135c379dd82eb8eb611f1aeb5f12b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @blurrydespair/libsignal-node (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b7ff09078e56bd40b5ad38f72027a55a39067b82aaffb0bfe6891e3d6d912e8 Package advertises itself as 'Open Whisper Systems libsignal for Node.js' but ships an install.js that has nothing to do with libsignal. On require o...
Malicious code in react-emits (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91c19bc51fdcc52d657031b8a30c2fff700771d0948672a47033628784ec8acc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in multyproccess (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7938a109a642dfe8b161e9568d6373a038c3413c0fd1f2b01702f4f173348553 The package's setup.py overrides the install and develop cmdclass to base64-decode a bundled request/.payload file and launch it via...
Malicious code in agentgui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7712e51950473497493a076fd637f14d2ba2e5a0313e9e5556f73718b34aeba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in message-compiler (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7469b2a666f71db1dd06fd00d6ae630becf97ad6854ff5c8938d2adcb5c8417 The package declares scripts.preinstall = 'node vishu.js', which runs automatically on npm install. vishu.js resolves the installer's public IP via...