MAL-2023-1498 Malicious code in jscrambler-cookies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2030b82f282ea6a8622a42dfe9e944d63773863556536a6b8413c1141237854b The OpenSSF Package Analysis project identified 'jscrambler-cookies' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1449 Malicious code in zustand-rc.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f36f860dc8e345626951d6e9c0b4c8798cb5b2ef0abd7e199f44840e71831a68 The OpenSSF Package Analysis project identified 'zustand-rc.1' @ 1.999.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1010 Malicious code in docusaurus-plugin-matamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28359b531d33ddceeca08244c1765d683b6b9256b420d2ffd6e6bac9e3ed8f3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8011 Malicious code in awell-libs (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f22989168c34b37227bb7bcfe0b03c27cd141f8ec26d34a78a0c0ba06553f881 Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-8015 Malicious code in cnp_al_corp_front (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ca87bb9f11572bb7178a087d94273972886a104b0d9f9b25ea8799b418f8c85c Malicious packages campaign since 2021 targeting developers, steals source code and secrets...

MAL-2023-916 Malicious code in typeahead-client-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9121846b93247c8f8db2f98b553de9231e63282325f9bbaff65e8b6916d2a6cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-539 Malicious code in js-cookie-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4db21916d97f75d76cd031171b76c9c5a2223cd3549d141bde479c6babb0569c Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-725 Malicious code in react-liveness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47194814149429b2ad255dd7af25f5f896c60db91a66c27a1e0ab4ebf077bde1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1132 Malicious code in chain00x_tsrc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5926bd93f4ff900c16d517fa3e4dc243e5a29e79d3fb377b8304df57ab6d347e The OpenSSF Package Analysis project identified 'chain00xtsrc' @ 1.0.5 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1384 Malicious code in os-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1372 Malicious code in install-pyyaml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b196a3a87537db3bd5691899d5c2481f27bcee88d6cf9e8576578929b376086 The OpenSSF Package Analysis project identified 'install-pyyaml' @ 1.19.12 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1366 Malicious code in guiconsoles (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24a3798623a3f68e4c418540b53aa81d86785aeb5618a02914aa14be4c4311ba The OpenSSF Package Analysis project identified 'guiconsoles' @ 1.0.5 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1554 Malicious code in ipstringfy (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx deea2822e14722106952d830748fc4b8c86f7613827ea90caaeb796f9a9eb9f4 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-1110 Malicious code in adityan-pwdd-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 674ca0f770a4ea3dd88fa7978e7f082c0baa7b7eaa7f761e364d1c8bccfc3664 The OpenSSF Package Analysis project identified 'adityan-pwdd-test' @ 3.0.8 npm as malicious. It is considered malicious because: - The package...

MAL-2023-569 Malicious code in little-heaven-by-nick-cutter-on-kindle-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1118eac8c0f8eef839cf2daade621df7e1fc982faf90314a0bbb38622add51c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-4330 Malicious code in libpipultravirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7fcc0ea3b75f3b40abcfb64156cfe1244cf729c1511a1e325ca450c73a7ee9f4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-1222 Malicious code in kobi--front-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5177d79e84b460a9e6e01e3f7ec740846cab3ff8094ccf7fa38232683498d45c The OpenSSF Package Analysis project identified 'kobi--front-helpers' @ 1.15.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1111 Malicious code in afterpay-sdk-example-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81a53b70f9ae2610148f223507c5427bea5a52160b7f8ba214a0c3ac0fe96f7 package.json declares a preinstall hook "preinstall": "node index.js" that runs automatically on npm install. index.js requires os/fs/https, then...

MAL-2023-5238 Malicious code in py-intelpingvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 031c07e21b938012af8f66916bab9194cbc2ab63012f704218f48a86ffbeea02 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5678 Malicious code in py-studyvmpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 33426fde62ec7abad65c46ecec38eeb6ccf617f113b948e5853f00c77d7802ad EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4607 Malicious code in libverhackedhacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fff3c918183b7b83234be4059b10a657ad7ccf188a4354f328e49eb9f120d34c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5530 Malicious code in py-pypywpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9e8c1282d1c8d913aee489bec6d6c8ed302d6de650bdbe047f61ff9c70cd7725 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6795 Malicious code in selfvmload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9ce2938b253c20ab49d48dbf9ee98104737fae210d18b5dabbeefb5504240b49 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5301 Malicious code in py-libvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b6bc0f1f3a650e2e506ae0d62f9eee6b2fa496d46e1ecc4ceb713968fa374063 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5288 Malicious code in py-libhttpmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 64fa61806e69f032bf9107fa0873b97cd7311226a1b7bdb3382af641e4c9a78e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5167 Malicious code in py-hackedreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ce41dd30a699a03e340ed9e8ab8258eedfc8b94ae6a7a62573bc718d759b4c78 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6827 Malicious code in strreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 796d32fda5954c18fa1e704923323db7f7fa0a79c7e6cffd1e810c657e6fbd34 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7895 Malicious code in vmver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57a72e03d4d746920e78e54fbb3a4185a85287c730f77f2e599527b9237461fb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4810 Malicious code in osintsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 996360312d49944c5ceac16259b24a749207fe37c14ddd8a02df098659c0f7bf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4802 Malicious code in osintgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cb1a893f9acbec287ae88fc4200dcbcb73c2a2a246fee1ab2be3c2d430e93e5b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2314 Malicious code in tkalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cc429bccca75f57bfabb5cbe57f6c52388f3a446e9aa277514d0d531dd523fa1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2183 Malicious code in requuests-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a73ffed20312c26aec693b6569e9eb3fc25abd0293a49ce01d24ecaef04f272c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2372 Malicious code in websoccket-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6bdf6be6543d1f9f106cc20903d6dacaf41d21adba4e46f532805600a52c7eee Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2283 Malicious code in solnaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc74aba221f15fe25c18636169a6829e4dc8830fed4ec5c974cb400aaf62b5db Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2353 Malicious code in vype (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ef3e7d1633c1a2afb9caaebe25adebf3eb32e6cc33ca1e25cd8dc581560c051d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-34 Malicious code in @chegg/wtai-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ed3e4233e6f2d188d7f2bab940bf8574017cf73a97b440daddc7f4e3176075a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-995 Malicious code in yandex-yt-yson-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ef8f5064d17e16f308f05ff124d515f803d1acfdc65fa58b4c26a8ac52041b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-224 Malicious code in @ebx-ui/ebx-ui-component-library-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb6db834c8045417e3e41ad3434edf6b7d78a926da70d77e7e11a1c3494ae28 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6673 Malicious code in tsp-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc403d291cb9ff5ecda4c2c9388c3274698f50c9cc4982cad4ee8da7017d8c8e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4509 Malicious code in maven-fluido-skin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e8d0590437843d2b722bd8095a7624ed357eef2b92d1a10fb122219dbf68184 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-932 Malicious code in alias-for-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d454b09899f2b5bf09380b8c0ec207d7347f09b5121d3b77e0d9d6e255e86dac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2786 Malicious code in es6shsm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 532e251435e5aa43412f0a3d67927aad3b0df8a7a31d174bc651cda37d917934 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3326 Malicious code in gen-mapping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4eec31ee330eb33aaa0bd7ce9a12d554bd6cad4d845e221ee1c01d5942a5ca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2864 Malicious code in ethereum-freeton-bridge-contracts-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebf44fb34d0c4b41f75b8df43505c808887332ac15b2e091b8c347607df187ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-670 Malicious code in @trp-gims-usi-cip/web-portal-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3af8e4aa1c2b27457d802e5968914320d2d7eee5ec097e2d1ff232489800d1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3423 Malicious code in gorgias-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3752bead049fa8a0c9a1ac58a30aec2abe204a01e1a2cb349475d3268d082eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-793 Malicious code in @zeos-libs/auth-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee22ec16fe8410ba0fa17b116c3f3bc6c12ac2f37d88e9e81e5cc13ac891467 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6180 Malicious code in smithy-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 30ca926e652a15a6d137905d2feee4fcb6145a04298503afdc22b7b71f8cef4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4892 Malicious code in node-upwork-oauth2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f042389769855f94f76780b3ab5957fb065f4bcfe1b005db035b50db1806649 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4891 Malicious code in node-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98c05fd352e2473c2e02bab12ddbc07d7a6a38a346c7962640b31ad91fdb1488 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...