Malicious code in sap-addnew (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12f8c238be86b6eda197ccf055ce731f7f59ebb9506f2333979fb21e18f5072a The OpenSSF Package Analysis project identified 'sap-addnew' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in job-specs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 33cc6191f6fbd8274e7eb5fe159654ded5d7fadbdc6fe26dbb62b26c0ddd42ed The OpenSSF Package Analysis project identified 'job-specs' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in fake-package-agpl-license (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53470e96107ebc806b1a440821244a335389aca112b5752ce995ae87150b0b4d The OpenSSF Package Analysis project identified 'fake-package-agpl-license' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in bageth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ceb1afd39be45104caed0892ba1fa5631e23807d2aa84d0981af466570efd384 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-package-random-name-for-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1f87eff60d8591d10e2be79afe5011ea9f63f823c7a014281e4e21f0da76eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cart-ui/core-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89568273084fef75464b1c975014417bf122a818685035e43012bb1ff5c3ba33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testpentesting123xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36685d552523fa8f2d9de645b437d7cecf143d10232afb786da7ff9d224afc2a The OpenSSF Package Analysis project identified 'testpentesting123xyz' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in mapbox-demo-gl-style-spec (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa5a509685be972fc15ceb454b2c3768fd8dd7c5162f11471642ab34e1f34fb9 The OpenSSF Package Analysis project identified 'mapbox-demo-gl-style-spec' @ 14.4.0 npm as malicious. It is considered malicious because: - The...

Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testpkg3322 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0204f7c4871e3d89a002e58fe4aa1f47b3e64d810fac531fbd8aa992929e0a60 The OpenSSF Package Analysis project identified 'testpkg3322' @ 2.35.8 pypi as malicious. It is considered malicious because: - The package...

Malicious code in not-exist-lykos-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9fdf307a333300d88cdb5031c5f135a2fe51e2a01d4db763c2d1457111ce9fe4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc2' @ 66.6.9 npm as malicious. It is considered malicious because: - The...

Malicious code in not-exist-lykos-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a4ae62646ef95a3157dcd61e8c0f58a25bec2c826d45f514c6e7bffde0126d4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc' @ 66.6.6 npm as malicious. It is considered malicious because: - The packa...

Malicious code in u-workflow.module.common.brand-safety (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 558ded355ca9595181f6d90b983a24679d51338462455e987540da8991afda50 The OpenSSF Package Analysis project identified 'u-workflow.module.common.brand-safety' @ 1.0.1 npm as malicious. It is considered malicious...

Malicious code in ouramerica-constants (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5e8ad6206cb55fdcb549168be1855e019bdc7745420d9b12074c0d682e66d50 The OpenSSF Package Analysis project identified 'ouramerica-constants' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in fhir.base.template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d390c24638a730f4667334b430b5a02e28305f199a61a609e88c28c3dd5f5b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bugcrowd-npm-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46b2f058641ff9f8a06f7a20bd103fbfc37dc8ffcfc09d191ab7a8b9d0c35715 The OpenSSF Package Analysis project identified 'bugcrowd-npm-poc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in custom-solutions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 72a2a270586bc778c1c8a52b2a28ad657e33370ff5e8df12cc812823127d9a1f The OpenSSF Package Analysis project identified 'custom-solutions' @ 20.8.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in discord.js-commandv14.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6755481c28189c15e2d7c4b6e9aa1992ba3317cd999a39efef14219c69956d09 The OpenSSF Package Analysis project identified 'discord.js-commandv14.1' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in npm_package_dependencies_linkify_it (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 540ac82200adeadb0c42901b9214e03c897e79ee20de2be6a87beb66e45393f6 The OpenSSF Package Analysis project identified 'npmpackagedependencieslinkifyit' @ 4.0.1 npm as malicious. It is considered malicious because: ...