MAL-2024-11779 Malicious code in blacky-sheppoing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd5fabc8fe73f97f7fe5b3fc0d6bcb5d30d10325cdc85801ff4b38f51112d597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in okxweb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fce54676410bc1cff0b9c8068f4b763ec72e75752bc5cb2ba565027d48dcc4fe The OpenSSF Package Analysis project identified 'okxweb3' @ 99.999.999 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11776 Malicious code in spot-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5266209798ebafe67e3827752a8025acd7d54406e99400930929aee0c6b8e862 The OpenSSF Package Analysis project identified 'spot-admin' @ 0.0.2 npm as malicious. It is considered malicious because: - The package execute...

Malicious code in themes-vendor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c01e7f6fdbbed9b6db3db6a981479a8264b303dedb88de43a2b051db3b1e0498 The OpenSSF Package Analysis project identified 'themes-vendor' @ 0.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11760 Malicious code in ico-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73a9101fd1883fa4391f715823a7c1e815b0f041bb5157972a143bddaaab285d The OpenSSF Package Analysis project identified 'ico-maker' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in error-stack-parsersasasa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95ee2924307d088b5e7509bfa51de2136a5611527d0de92d5ea4020f7ba0edf0 The OpenSSF Package Analysis project identified 'error-stack-parsersasasa' @ 1.2.7 npm as malicious. It is considered malicious because: - The...

MAL-2024-11770 Malicious code in keycloak-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3df989aa26dccceca3917c9b3454427df4f54e9c104fbc080e913d30af3e66b2 The OpenSSF Package Analysis project identified 'keycloak-server' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11765 Malicious code in @wf-ceo/react-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91f840b7f5327bc27f6d9d37a547419df230c1ff7fd68cca9b0753faf6759012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in passport-openpass-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0761835d95103228401a69c1b951451a6a5698da0f7edec16514d5072d6b6051 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11756 Malicious code in passport-openpass-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0761835d95103228401a69c1b951451a6a5698da0f7edec16514d5072d6b6051 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11755 Malicious code in @neo-ds/neo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d3d5e2f6b432e3a4491b74a6c06d176dcf93aa9cf419db326cea281b530044b The OpenSSF Package Analysis project identified '@neo-ds/neo-utils' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in @neo-ds/neo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d3d5e2f6b432e3a4491b74a6c06d176dcf93aa9cf419db326cea281b530044b The OpenSSF Package Analysis project identified '@neo-ds/neo-utils' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in web-live-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e96245195cd1049cb66ab19ce9438f1ac6e5d2e00b7afa701c04b8aba2c3f355 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.collections (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261ab2743232ff1e6c05ececf67a115acadf196fe4994bda33c1da81b933ac67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11767 Malicious code in com.unity.collections (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261ab2743232ff1e6c05ececf67a115acadf196fe4994bda33c1da81b933ac67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @neo-ds/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11251 Malicious code in @neo-ds/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

Apache Superset 安全漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. An information disclosure vulnerability exists in Apache Superset versions prior to 4.1.0, which stems from an error message generation that contains analysis metadata information. An attacker ca...

MAL-2024-11247 Malicious code in fake-emitter-no-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617a8cfca6b74959261bd71e3b3ca3df87a9c9640991d6ffcf692cf5597f01c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in chronos-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2042645907ee513e1705e5796c7860a5a694174e1033111fdf762a0ca05525c The OpenSSF Package Analysis project identified 'chronos-web-ui' @ 0.0.5 npm as malicious. It is considered malicious because: - The package...