Malicious code in bb-ui-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8398af17925a65881b1e463a1cbc606615814d86f9a5bab0db801d391bf6210a The OpenSSF Package Analysis project identified 'bb-ui-tools' @ 1.2.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7823 Malicious code in usaa-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737879d1d600ff1a2162645b8e3951f8f7f8f9c3494b052c5f28eef84339f1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7822 Malicious code in usaa-message-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf3238e942e0b80b48645634f7548320e2fab682269d38213ec514a47691a97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7809 Malicious code in ent-cas-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 10b213a4812a19225670029458ccad5e3cb611137dab7807c3a0f58f9964e350 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7811 Malicious code in ent-file-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e476e9a95e121c935215443a2069d17764649684cdf226b5d429ea50a9c8c422 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow logins through Googles "Sign in with Google" feature...

Malicious code in quizdom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b6e87a0fb56928d5946cb4cff73f2dd9a9ef6eda0d943f74d7f0c4333df8be0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in cugraph-dgl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6c1f145fd51ee7737cb44e28b07d4ec3bfe53f4a8aac51d0b8bce58ef8bd71f7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-10895 Malicious code in some-random-package-33 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 56e2adbf4dfb01600fc7df2c4a270d862b1b575c7040142ae070c7bf990d671e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-10239 Malicious code in debug-toolbar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 57a187231b24ff90938749793a1f8f768e606a7fe5da9d2c6d74510419c14ed0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in littelbitx0 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 df4d01291bca9ae78e4a70eabaeb7b2729c75ae5a470c4366215657aa9354e2d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-36 Malicious code in rtpoc1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6fec3cb3c9354af29d7edbc82703c0fe7406084014bd610bd383ee2795d324ca Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-8025 Malicious code in puffioner131 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03e7420ebe17c5b3feef69b274c7b6e57ed2e6913e19a561d7040e3b48e041a2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in subdomainer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be979ecd7261fc996ff3007675ba6e59cbdab8da999ab44c937adb5b1a609724 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-10236 Malicious code in blab111 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc1ea66b7bd97f1590f64319f168a1e5ce5f257bf47595de26247cc07a48f80c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in hello-wordl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 238c137f1939d99c855ef5fedf6f16b67ac8fcd9087d80270475d3eeff8e8c65 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-7802 Malicious code in @mentoring-services/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6248cce7fe3e50ce8c9fe940f959d883f287bff1a15d23813fa4dad7f960a486 The OpenSSF Package Analysis project identified '@mentoring-services/sdk' @ 10.20.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7803 Malicious code in feedback-html2canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59673c0fc4701541ff9cf2002ba260a6cb6429a2b8ed7bd4398362bab5b421b1 The OpenSSF Package Analysis project identified 'feedback-html2canvas' @ 10.20.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-7795 Malicious code in @vertiv-co/ui-library-nextgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffbf749ac60481466ea1b80f8cdcf3d84df099b6496876a765054477889570d6 The OpenSSF Package Analysis project identified '@vertiv-co/ui-library-nextgen' @ 10.0.2 npm as malicious. It is considered malicious because: -...

MAL-2024-7796 Malicious code in @vertiv-co/viewer-service-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a42df7da8768f315d6d12eb06fa799e0781561526ae3c71ad21f34b1dfe06411 The OpenSSF Package Analysis project identified '@vertiv-co/viewer-service-library' @ 10.0.15 npm as malicious. It is considered malicious...