MAL-2023-765 Malicious code in seadrop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 093d236f43b0c51ee4f6c1443bea6422a48b0359e0c2c3a56c0ba53bd26598d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-5233 Malicious code in py-intellibint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c51243b24c705c8e86f895cf56a4aaf31db49b64674882dbef77513f1bc075dc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-1222 Malicious code in kobi--front-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5177d79e84b460a9e6e01e3f7ec740846cab3ff8094ccf7fa38232683498d45c The OpenSSF Package Analysis project identified 'kobi--front-helpers' @ 1.15.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1111 Malicious code in afterpay-sdk-example-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81a53b70f9ae2610148f223507c5427bea5a52160b7f8ba214a0c3ac0fe96f7 package.json declares a preinstall hook "preinstall": "node index.js" that runs automatically on npm install. index.js requires os/fs/https, then...

MAL-2023-527 Malicious code in ing-orange-lu-luxtrust-oaw-mobile-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c47e898a8d28683ffbebd031a0d10c1a1d610661c8b876689bdc85931ceda9f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-12 Malicious code in tzinfo-i18n (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80d76ff3efd3a37e90d86c31f34ad01633504eb17709869928335523c66a2a55 The OpenSSF Package Analysis project identified 'tzinfo-i18n' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

MAL-2023-4635 Malicious code in libvirtualsplitstring (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 12835d55612081a12b0190ee5d1dbe4b90dd33cc79525e9243fc956ed45ed66b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5733 Malicious code in py-verhackedvirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 10a001778f21382f6f0dc340d8f6556f38aa9b38b8f48e6fdcbeb2822dbca1b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6625 Malicious code in selfsplitreplacecraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7df84fb9d259d10ace99c1e37391c7d1a2a641f28aa55e746f5bca57e8b03488 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7303 Malicious code in tposintadget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 09d7c9df1859042d6bf492ed412327a819ba78649e3175f7c9f05953d096b30c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5103 Malicious code in py-encodevirtualgui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 936dc38858ffbb3e9dfcf5c63575092270fed7b32221a005a15dea78ccd45bc1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7714 Malicious code in tpvirtualramget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e1d5d9368eb71fed1c146965eb23d9fc0f5eeda9d35ab57a5342f84481e6c5a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4539 Malicious code in libstudysplitping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bd8fb4d1458c705879a5ade12321d358b9a8caf6e5656172e8ca5260de3a3496 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5530 Malicious code in py-pypywpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9e8c1282d1c8d913aee489bec6d6c8ed302d6de650bdbe047f61ff9c70cd7725 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6795 Malicious code in selfvmload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9ce2938b253c20ab49d48dbf9ee98104737fae210d18b5dabbeefb5504240b49 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5301 Malicious code in py-libvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b6bc0f1f3a650e2e506ae0d62f9eee6b2fa496d46e1ecc4ceb713968fa374063 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5288 Malicious code in py-libhttpmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 64fa61806e69f032bf9107fa0873b97cd7311226a1b7bdb3382af641e4c9a78e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5639 Malicious code in py-stringre (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b632a11bbfba18164248670315d28aa5cfc331d3563d7286139d8cf6d79b92c7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7895 Malicious code in vmver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57a72e03d4d746920e78e54fbb3a4185a85287c730f77f2e599527b9237461fb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4802 Malicious code in osintgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cb1a893f9acbec287ae88fc4200dcbcb73c2a2a246fee1ab2be3c2d430e93e5b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4844 Malicious code in pepultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c89d471f3e9da7d239933047898807dc2d0143a2bde481a033f648635b037ff9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-537 Malicious code in jquery-mask (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60c2e86401517688fc0bdbd68e989cce56834a9c11090e0a27fd0e0b5cdf9ca2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-4 Malicious code in eslint-plugin-dropbox-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef0b78a956b34b6e0c3db65f1f623e28b0e80753ffae8ea19c75e4217f1dc0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-2372 Malicious code in websoccket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6bdf6be6543d1f9f106cc20903d6dacaf41d21adba4e46f532805600a52c7eee Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2368 Malicious code in webscket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6c8716d958d7a19a4e59c03eac34c6d8338493b88fb15fd0440025fcbce59c34 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2132 Malicious code in pytorcch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d91cad6cab8d904fca7561eeb8ec0202d3e0ca760886b827ec233387f55a05f7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2283 Malicious code in solnaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc74aba221f15fe25c18636169a6829e4dc8830fed4ec5c974cb400aaf62b5db Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2353 Malicious code in vype (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef3e7d1633c1a2afb9caaebe25adebf3eb32e6cc33ca1e25cd8dc581560c051d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1718 Malicious code in cryptocomare (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b0b4bccf758cc5d0247e670ac7b276c7fb4eef449dda847c01fc94bd0ae95125 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-461 Malicious code in fronton-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d44f273938402bf07c8942f200cf613694ff6b357a5800e67b88a47dc620f019 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-224 Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6db834c8045417e3e41ad3434edf6b7d78a926da70d77e7e11a1c3494ae28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6673 Malicious code in tsp-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc403d291cb9ff5ecda4c2c9388c3274698f50c9cc4982cad4ee8da7017d8c8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4509 Malicious code in maven-fluido-skin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e8d0590437843d2b722bd8095a7624ed357eef2b92d1a10fb122219dbf68184 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-932 Malicious code in alias-for-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d454b09899f2b5bf09380b8c0ec207d7347f09b5121d3b77e0d9d6e255e86dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-220 Malicious code in @dydxprotocol/solo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414b7a58031d755b2ab4f51d6bfc4bbaf5dad684161eab9b2d1062b8d4ce22df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5107 Malicious code in opsgenie-connectwise-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45eb34acac118701b9fce76014bda5547b8ef8ecb7fa3c5de42591eb484616f1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3411 Malicious code in google-auth-library-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cba35f5d5ad2abbe0f380ecedf252a58857f3f01eb94ccd979f4ebcb752adef7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1 Malicious code in rustdecimal (crates.io)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e33f42f05c60c6d9f9297bae15a43d6c445e2ad0fd67fa4ef144e5cc79d09c7 The Rust Security Response WG and the crates.io team were notified1 on 2022-05-02 of the existence of the malicious crate rustdecimal, which contained...

MAL-2022-3326 Malicious code in gen-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4eec31ee330eb33aaa0bd7ce9a12d554bd6cad4d845e221ee1c01d5942a5ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7398 Malicious code in zksync-zkwallet-vue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1bd3b6b946e713de4e537f8421bca9683725288606ef784195ff2e5d01110aea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2864 Malicious code in ethereum-freeton-bridge-contracts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebf44fb34d0c4b41f75b8df43505c808887332ac15b2e091b8c347607df187ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1707 Malicious code in bsoldncqaiwkxftk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a914ce0d4c6cdb43575f4590de0a8a1409af46cc5303252fa3676075efb29027 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1468 Malicious code in base64-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d462341360820f858bf3682fcc3be6c7b9407fc903061b5b1ad70b88b81e9969 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-670 Malicious code in @trp-gims-usi-cip/web-portal-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3af8e4aa1c2b27457d802e5968914320d2d7eee5ec097e2d1ff232489800d1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5632 Malicious code in react-bank-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff5553f821ba524b88f457343bcddbb43c844774492bf8fdb955996520d7b417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3423 Malicious code in gorgias-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3752bead049fa8a0c9a1ac58a30aec2abe204a01e1a2cb349475d3268d082eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6180 Malicious code in smithy-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ca926e652a15a6d137905d2feee4fcb6145a04298503afdc22b7b71f8cef4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4892 Malicious code in node-upwork-oauth2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f042389769855f94f76780b3ab5957fb065f4bcfe1b005db035b50db1806649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-689 Malicious code in @umpirsky/country-list (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee80226f6b6326ea4c985aaff2fac56825152a2759c76c4d9862b0ef5b8deddb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1502 Malicious code in bender-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1b3d673f58d56435e2247ec618209b57a3c23bacdff658646c24daa2ff8ab1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...