MAL-2023-7944 Malicious code in @cybs-ui/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e25c2aa7aae39d30717302a7e0a6b94336a286f1167456157770d53c08d9ba99 The OpenSSF Package Analysis project identified '@cybs-ui/components' @ 7.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-7943 Malicious code in remove-bg-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fdcf2ad8e97745b6be357f0d7c486abc18016cb172caf360362952be6284ce15 The OpenSSF Package Analysis project identified 'remove-bg-cli' @ 2.0.8 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7923 Malicious code in emails-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d64e5e472a3443e9f96436bd842dbef0c6b3170fae9aa095cf45be67d7a31124 The OpenSSF Package Analysis project identified 'emails-helpers' @ 2.0.20230828051750 npm as malicious. It is considered malicious because: - Th...

MAL-2023-7921 Malicious code in helio_tawa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3969dd0c6bdf467c3fcee0073a43ac0e9db8c1719d8d6b0bee1b2ec7cddcc1ff The OpenSSF Package Analysis project identified 'heliotawa' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7919 Malicious code in aws-encryption-sdk-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ded7612b942b1e3da52d4dfc7abcb64d6ad4bd30d80fac04815238838f9f4763 The OpenSSF Package Analysis project identified 'aws-encryption-sdk-javascript' @ 23.0.0 npm as malicious. It is considered malicious because: -...

MAL-2023-7920 Malicious code in yoga-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfdba41ba7e979cb19d028f2a4caec895183aa268f5bf2a1b2e1ff086366a1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in yoga-repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfdba41ba7e979cb19d028f2a4caec895183aa268f5bf2a1b2e1ff086366a1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ez-retro-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6931a4e6135ad2a4f946c7218b4fcf31f1efc0c75f0d58f96e9a5fa793a0e144 The OpenSSF Package Analysis project identified 'ez-retro-server' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7916 Malicious code in ez-retro-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6931a4e6135ad2a4f946c7218b4fcf31f1efc0c75f0d58f96e9a5fa793a0e144 The OpenSSF Package Analysis project identified 'ez-retro-server' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7906 Malicious code in ux-authentication-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acc992350d87b94d42d60618d28b4f1111d7b55add45c9262f23033782743741 The OpenSSF Package Analysis project identified 'ux-authentication-auth0' @ 1.0.2 npm as malicious. It is considered malicious because: - The...

MAL-2023-1571 Malicious code in gapps-automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fc1e430c7dfe87a465530b1e2067f640fda560b96555750466520fb727d8f19 The OpenSSF Package Analysis project identified 'gapps-automation' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1570 Malicious code in @dpdgroupuk/your-dpd-rest-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc0b6ed54c73bb7b7cfbb33bfedad652cee9252913fd10dcc726d67cdea39f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1567 Malicious code in dexalot-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49e7d1e48c40c5dcc937fed7e2bf1fd9437a3886652c7fa4c6d14181cd5aca86 The OpenSSF Package Analysis project identified 'dexalot-docs' @ 3000.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1562 Malicious code in file-format-series-json-to-sketch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8508035009e823eff2a635014b28a526f6a2ed3a3132c185b572bb5cd26095ce The OpenSSF Package Analysis project identified 'file-format-series-json-to-sketch' @ 99.99.0 npm as malicious. It is considered malicious...

Malicious code in sketch-ipsum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 722f81803d7487f9d05f1e65dfb836a6fa8821fd711b81a62cfe16061a549a99 The OpenSSF Package Analysis project identified 'sketch-ipsum' @ 99.99.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1546 Malicious code in marionette-ui-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4962667c8dd0da2bbc76d598b0820a7371844141b721e7d346913fae8581c733 The OpenSSF Package Analysis project identified 'marionette-ui-components' @ 6.9.2 npm as malicious. It is considered malicious because: - The...

MAL-2023-1545 Malicious code in gradient-function (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d41bbe2c82b0cb7c5410006430478c3cc70133f726eda4f584c0f7f943ff938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1542 Malicious code in lp-transporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11c496a4534fa74ceededa76f0d7d5d65094550a9ba71e4ee4f25e982cc16beb The OpenSSF Package Analysis project identified 'lp-transporter' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1540 Malicious code in js2restutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d759ec94669349db98c7b1d0f6d4a5b916e9a2ae8b98efe8acaa421a3824d689 The OpenSSF Package Analysis project identified 'js2restutils' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in js2restutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d759ec94669349db98c7b1d0f6d4a5b916e9a2ae8b98efe8acaa421a3824d689 The OpenSSF Package Analysis project identified 'js2restutils' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...