MAL-2023-6564 Malicious code in selfrandcraftreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 94c94718b4b02f788325a9c38cbcbeecff0565e5f6237407774ffa05702717a1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5535 Malicious code in py-pywmchydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 69e27662b19972379034c043b07ed59ea137e39b816f5d078443d51a8e76fea3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7321 Malicious code in tppaypaledkill (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6f53d40742ab52edac4233be08cfc18cf371edde9a5236a19f3865d4d1a7f3c7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6471 Malicious code in selfpostguihttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f52d4f7c43243f0eb7d84335dabadf9d4240cafbd0f98adeb086263ce3360a4f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5639 Malicious code in py-stringre (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b632a11bbfba18164248670315d28aa5cfc331d3563d7286139d8cf6d79b92c7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4810 Malicious code in osintsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 996360312d49944c5ceac16259b24a749207fe37c14ddd8a02df098659c0f7bf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4891 Malicious code in pongpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx feec7a1087b068e4602a7d47072a4336bac272f83f896ad11e65efbfd4b7fc60 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4756 Malicious code in minecc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 346324e80b7fdd082fd9c18592544f6f9f0e19e036d4f8ea73ecf1274e7ab426 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4875 Malicious code in pippost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 35715e0d1f0adc1c1a9c0c45e3fefe3029cb1931c8d74e2d4e2dd37b15dc4cd8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6850 Malicious code in superlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2e1ca1ec57f7ed41975e6a918d346cd0a215b1f001f36f01e07e5fe1fcb8c7ec EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2328 Malicious code in tkcalendra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dd65f2c94fec35121de0dd1448e48824d9236968ead1512d8474404e0d4a1806 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2329 Malicious code in tkcalenndar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3657f1c1724719566871bd93abb04097d923bd1485a87e9661f549a00afa9011 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2008 Malicious code in prompt-tooolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7bfa11dce7ead28933795494d063c0259945245850cc40db9a12da851be8eb64 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1930 Malicious code in opepyxl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 710fd696d07dc5bcc41cf801dcdaf3ef949e2c20e05e3e3f508b0a7bec644cc4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2383 Malicious code in websocket-cient (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac94b737cfa799516c0c831332c0d3406bf24089725787a5a884703605f8af9a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1935 Malicious code in panas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c719c243fa8f800bbdf2b03931d24cd24b27045a542eb63f1ba65f8efcf69341 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2218 Malicious code in scikit-lern (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7f251a0fde1f6bcc1fa1290b60c6c09ee739c1ed8de2be91fd77f3280f3a0556 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2217 Malicious code in scikit-leran (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f153c03bad0b93fd0b624eec402a80347c6346c034b4a1542a3c3bf458b14c89 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2452 Malicious code in yfinacne (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 83f90f1335de6525d7c34d7d1fe32c807964daff9ce061822f0e18a96ab4bf66 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-34 Malicious code in @chegg/wtai-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3e4233e6f2d188d7f2bab940bf8574017cf73a97b440daddc7f4e3176075a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-30 Malicious code in @buffer-mono/non-secure (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c24391afd972eb3f30c0c2a5e0ceaa4b67a2163a600a060cd41acb3d600b6467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-163 Malicious code in cathode-versions-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0e16e7e4327697f795d989d71781e02f4036cfffca1d0dce1e5b9a6f0a54f7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4491 Malicious code in material-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ec41287cbcd54f97de58bebd79302854eab4c46d68300afdb5f1aeca9181df3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7430 Malicious code in zlibsrc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfbf8f67470456ad6b704fb2c2d47edef71ce077afe59bf1a6f79913bde2fd5d Security researchers at Check Point Research discovered a malicious package called zlibsrc impersonating the PyPI package zlib. PyPI has since removed...

MAL-2022-6744 Malicious code in uglpti9f (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5708a7125d246cbcfa82d8f0b5ce76a91aab70187c166c079cc4a0560ec7e07d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6199 Malicious code in socket.ioo-cient (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07f01ed54db7c593f762bbcdbd2efed41f85c33c880ea63476c04a699db7c23b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3741 Malicious code in hyperwallet-xdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8284f91cedc0440e3f285bd0ace2b911e2c960124de43af637449a76e1de5648 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4088 Malicious code in jworkflow (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b05273c238a079fdb84cb37e33888269314eccf0c346e46defc9d39dc1486669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4740 Malicious code in muzli-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d70906f92e9d13c4ed3f66e1d92ff8617be92998ead1687ce3a5354fe8441864 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4616 Malicious code in mitek-science-mweb-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a09b93f1da388cf6ad51c93c0ee3385524d3cb0f1557a6ead30db092021312d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2818 Malicious code in eslint-plugin-jsdom-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebd915be9343782dae6c26227725ce0e3f3b9146c8db39b3ddca2b66ee40711a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6180 Malicious code in smithy-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ca926e652a15a6d137905d2feee4fcb6145a04298503afdc22b7b71f8cef4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5244 Malicious code in paypal-sdk-e2e-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf78f6e3c0804dd208733f5a6a2c666614467a873d68214580d2f183b1dc35f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1502 Malicious code in bender-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1b3d673f58d56435e2247ec618209b57a3c23bacdff658646c24daa2ff8ab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3390 Malicious code in global-order-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b45c8559de1a9a448235e712738bfef842eb940a36b63ee86dede4e988ad4ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6139 Malicious code in skale-box (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0fe530bb2b89b10712f8424ef8a5939bb017c13ae4895c1c889befdc2bc0df7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2607 Malicious code in duckduckhack.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0052ff314b9a16d3e634bfd02296d99e2d3dccd151fc048b3b569b41f84d5185 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6190 Malicious code in sncicd-install-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9077b8460d852a9b8afdc2a831fdb0f74e227b48f17f85ddb7ee0da67efa489c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2312 Malicious code in da-wix-dealer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfcb11815b9b0e253aafec13c58cac7ac7795ae8c0afa88ca0408bf0471a6cb1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2631 Malicious code in dx-devsite-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94d8e93f1fe2cd310bb5359e393df7bf057fae4e9a8bdb71bbcf18dbebb8d5d1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3615 Malicious code in hermes-parser-packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d57798c5eb51e66de07f5323bca8ee97afedd31878c8754b52ffd76091b7f4d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1515 Malicious code in bfx-facs-auth-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b472865a206702723408d6da2983fce52eda07befe86ec726a3e94f08363879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4694 Malicious code in moonbeam-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e8999054fa21ea2342ad98d26a3058503720057689847909ecac60f10ec221c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1345 Malicious code in azure-keyvault-certificates-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95f4c241905d9e557472c20ba2fce0d7a9246b1fd912f2b680a906e98699f866 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1227 Malicious code in azure-ai-form-recognizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b16105a8fd2ecfc0ef734929e5c29a2ecf82852ce08f85eeeafd664643e61e81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1329 Malicious code in azure-eventhubs-checkpointstore-blob (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 446f07ebe7277743c5b75edd4e41ddee867b36339feabc5d6040ae83fb8c8ea8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5522 Malicious code in purple-bitchs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f72c762ac4691edd746e10d2500da450f31dde8c149ff3eee267b86dd413cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4094 Malicious code in kaiko-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f38998a28674f6040a3aedf9b07e7223561975de3d58c0b6bb1ddccc0f981d97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3784 Malicious code in iex-cloud-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cc43b1119f24b8d76ffe3ea08b7b2221e7fff890494ef1678db79809befa3d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3073 Malicious code in flightaware-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b8bab02276b0cea177ec840e77f218780115862eaefe0220c0dabc756475ef2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...