Malicious code in proton-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis edfb8318aed91ce8eb51e269ae47766d501e4e03c1b95f4327570493b4b1379c The OpenSSF Package Analysis project identified 'proton-account' @ 99.99.999 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1342 Malicious code in webpack-cli.legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22737261df7f74819a3f3f968e6516db5e37f6621827d6148b290f7650b9992f The OpenSSF Package Analysis project identified 'webpack-cli.legacy' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1343 Malicious code in webpack-dev-server.legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85cd0dbb01e0045658eb423c4580a09f07f36ce5af1689227f99e72348cda4a6 The OpenSSF Package Analysis project identified 'webpack-dev-server.legacy' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in react-test-renderer-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44a1a6575888ff4c59c07150c3211aa61af227fb9d17025b72af93ba65153098 The OpenSSF Package Analysis project identified 'react-test-renderer-17' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in myattenuator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea4131b4858e840e02fe12b2a8719cfe85598245a84e842b917dd595ea1af4e4 The OpenSSF Package Analysis project identified 'myattenuator' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1241 Malicious code in myattenuator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea4131b4858e840e02fe12b2a8719cfe85598245a84e842b917dd595ea1af4e4 The OpenSSF Package Analysis project identified 'myattenuator' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2023-27108

An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns the user's call log without origin or permission checks. An attacker can inject a JavaScript payload that runs in a browser or app without user interaction or consent. This allow...

CVE-2023-27108

An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns the user's call log without origin or permission checks. An attacker can inject a JavaScript payload that runs in a browser or app without user interaction or consent. This allow...

MAL-2023-1305 Malicious code in stateful-fastclick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a06e5b71a04fa67ca20937e8e438c638644db87d181799a046d22c568e6c4c5 The OpenSSF Package Analysis project identified 'stateful-fastclick' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1353 Malicious code in zsbpwebsdktest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a25d6ab5c8c52c4020f38d78237f6c953a826c3e8abc287370befada0727c50a The OpenSSF Package Analysis project identified 'zsbpwebsdktest3' @ 9999.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1143 Malicious code in compositionupdate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 609e73b696d2a84c8c2169afde78694231815b46be300710ddf913fed7c63d1b The OpenSSF Package Analysis project identified 'compositionupdate' @ 88.8.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in compositionupdate (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 609e73b696d2a84c8c2169afde78694231815b46be300710ddf913fed7c63d1b The OpenSSF Package Analysis project identified 'compositionupdate' @ 88.8.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in sovrin-networks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b31e1dcc001e433d6e7aeca9f5f73e1934a3813dc3225fc622622f26a2a0c0a1 The OpenSSF Package Analysis project identified 'sovrin-networks' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1320 Malicious code in texture-allocator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 295589602f0c0baf1ed21fb915589780ccee883cf28e0458728a211b840b4bae The OpenSSF Package Analysis project identified 'texture-allocator' @ 99.99.80 npm as malicious. It is considered malicious because: - The packa...

Malicious code in eslint-plugin-indeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

MAL-2023-5 Malicious code in eslint-plugin-indeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

MAL-2023-1297 Malicious code in skyscanner-themes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e80c6a572898c77cc6e5b4c0266cc4805778ec35102f514669accd32b0664f0 The OpenSSF Package Analysis project identified 'skyscanner-themes' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2023-20958 · Kaios · Kaios

Name of the Vulnerable Software and Affected Versions: KaiOS version 3.0 Description: An issue was discovered in the pre-installed Communications application, which exposes a Web Activity that returns the user's call log without origin or permission checks. An attacker can inject a JavaScript...

Malicious code in ladoputi-static (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1448356c200aec8d8b1197163159b7b15288c3629fc0a3ec2d33dd82c06725ac The OpenSSF Package Analysis project identified 'ladoputi-static' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...

Malicious code in apache2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12b1a6eed914c86f199b052822217042e2afa047d6b1d9921fd30b56f1e5e650 The OpenSSF Package Analysis project identified 'apache2' @ 1.1.9 npm as malicious. It is considered malicious because: - The package communicat...