489 matches found
Malicious code in prettier-v3-for-testing (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522c1e741b8482af7e3577e20c83b8e29a0f217b9c951d0e815e5c01af165408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-11219 Malicious code in asuuuuu (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d2219a3e70e5af240f63d41ab082cad543b84acf2abd045011db292bc69654 The OpenSSF Package Analysis project identified 'asuuuuu' @ 3.1.3 npm as malicious. It is considered malicious because: - The package communicat...
Malicious code in graph-studio-billing-contracts (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd4325b249b7dfad124c21ffe39f85d2e38f1b6c2d31361f81e821adb8365ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in newpipv3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54fac2a807bae6742d82c86f55d97a1b4a810e42ee3b0b9dcb0c981c36ab712d The OpenSSF Package Analysis project identified 'newpipv3' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...
Malicious code in webpack-support-multi-domain-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware df28dfaede54bce66eb7320e580118358e8db8869c014298d0a7abb4a0e43497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mona-runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis deb04a09ed185756e155e8000e2ba858d8995b9ced7536cd15b25012b100d046 The OpenSSF Package Analysis project identified 'mona-runtime' @ 99.11.18 npm as malicious. It is considered malicious because: - The package...
Malicious code in seller-base.preview (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddbcbd39fce83a9480abaad12bba49d263092e47fd23fb79d8058735439f16bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in opa-fe-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0912f1fa265b4c148d99d5ebf17f99f098efa46a5222a44acee011d8ab0680df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in sixsense (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7cb77c89a27aff142eb4dd167744ea5784b414741b03b0c7dd1b4eb5a3614c0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @bytedanc-ad/mui-vue2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c30379ad4ca7a644dc00d7fe6583a1f268e6fb8e076179cf094519d27cf2dc54 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue2' @ 89.3.5 npm as malicious. It is considered malicious because: - The...
Malicious code in paws-room-acoustics-simulator (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 445343e49b96223100e6e2d17e72f3cead8dedeeac8f6250e2b3b66b52c694e4 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in compresai (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 eff61bf37f16806690cbf9520f29f4e65c1619fb07bf01ccbb8c3c830f501736 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in keras-preprocess (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c153be1503b6ad6b4b2a00de177c76a28d50f4612220edb1dcebf6ac85812ba2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in bytedplus-rec (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 60f79f83c8af55853fc5ee2cbcd855f6799c4d5fa43cae98ddf63d0aa5f5fc23 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in nuerst (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 155c4cfe70e7c556175ba3cc4e0c00815168e4e3a8b161ca72c0fcde99079ed1 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in v2mlx-gml (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 00b9359396313be6a33f8efe51b60793b58c9f0cb6d2862e074d4109c33c107f A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in cml-tt-sets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf782b7bdc62c7fa7743c5fafc916bcd3c20ec2c23d89837b120d35d53659e6b The OpenSSF Package Analysis project identified 'cml-tt-sets' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...
Malicious code in nuance-mix (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b788479065c5160a08f7fcf3a2144521ea22a444ff39554c3c51f7c0ecec1c48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yogergerherhme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364b3cb8f528aa44006944727caef3a2de94ca68d931e97cd82abcb3f2bc8197 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in firebase-rc-monitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5050a33312844999e086c6e2ca70d4ded2bfe70479b9cd505ba48564f6c2eb34 The OpenSSF Package Analysis project identified 'firebase-rc-monitor' @ 100.0.5 npm as malicious. It is considered malicious because: - The...