Malicious code in wpi-xmldom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ca72dd827e914309265980a13573c7017021ad948c7fb748b36707a9aa85e47 The OpenSSF Package Analysis project identified 'wpi-xmldom' @ 2.2.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in snapchat-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74175a7cb8d558510ee0b14523be60015ccb0796614898009692f129fd8f996f The OpenSSF Package Analysis project identified 'snapchat-test-package' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in zustand-rc.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f36f860dc8e345626951d6e9c0b4c8798cb5b2ef0abd7e199f44840e71831a68 The OpenSSF Package Analysis project identified 'zustand-rc.1' @ 1.999.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in gp-screens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd47b7e0b82292eb8e0cf4de06de3b9027df37daa726f014751598535afdacaf The OpenSSF Package Analysis project identified 'gp-screens' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in akita-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 114fb2289d01453676125580487fd32c170d5de19b49b286ae7b1ce9943135ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1301 Malicious code in some_internal_package_for_testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53107273160f2452143bcbee916077e6adbca0f10d5f2d80e0afeb276d92d788 The OpenSSF Package Analysis project identified 'someinternalpackagefortesting' @ 99.9.9 npm as malicious. It is considered malicious because: -...

Malicious code in deploy-workers-cloudflare-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86fc56c152b28aec95059aa473a4a560558083997bf0bb390a71e672fcd73b29 The OpenSSF Package Analysis project identified 'deploy-workers-cloudflare-com' @ 9.1.0 npm as malicious. It is considered malicious because: -...

Malicious code in google-apis-androidpublisher_v2 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 715b9e91530380e15e848bc0374f342584cdd61853308582683eb214e0da9927 The OpenSSF Package Analysis project identified 'google-apis-androidpublisherv2' @ 0.0 rubygems as malicious. It is considered malicious because...

Malicious code in firefly-utilities-helper-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1e40a9479f8d7f46dde5d530c7da4a5ac550607ec867806525a3bb749d6e76 The OpenSSF Package Analysis project identified 'firefly-utilities-helper-ts' @ 1.1.14 npm as malicious. It is considered malicious because: - T...

Malicious code in nextcloud-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be6d2af367680b5d332b3472317eeab4a364c78e1617e1d7f3a32f1d797fcdc8 The OpenSSF Package Analysis project identified 'nextcloud-api-sdk' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1248 Malicious code in ng-file-upload-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51cd8a582b38d577b6dc6deb3879019bd0b0c68ae7e5bf23d787aa2721e6e334 The OpenSSF Package Analysis project identified 'ng-file-upload-shim' @ 12.0.4 npm as malicious. It is considered malicious because: - The packa...

Malicious code in cypress-typed-stubs-example-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d06bdef719edee1677bda9a46ae9d713bed145fb60b910c15f7260b2fca5b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in barcodeqrgen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e27682d3c0d71a71640f7d7830be4cd2125402e0509403333eb45413256f63c The OpenSSF Package Analysis project identified 'barcodeqrgen' @ 1.0.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in testipaketti_keketester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d80c6896d6f1131eb5e9b88ce8f72fdfd575ff8f7666be6c09eccc7e1b13798 The OpenSSF Package Analysis project identified 'testipakettikeketester' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

Malicious code in mongoose-geojson-schema-2d (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f64dbcc8b994e165e387b83aad34a6af319aafa0fe13b67eb52d8c5fb286e34f The OpenSSF Package Analysis project identified 'mongoose-geojson-schema-2d' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in matplotlib-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 190845a762334a5ed99d67986a803d15af723991a1dd90af98f6be280284aa02 The OpenSSF Package Analysis project identified 'matplotlib-requests' @ 16.12.4 pypi as malicious. It is considered malicious because: - The...

Malicious code in lexicalclipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59c409f3c41158c9a796e729081150b20fb417620db7c972482e66de56f3e0f5 The OpenSSF Package Analysis project identified 'lexicalclipboard' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in lexicalutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74435494f223aa6bbba50c2e8e746a27b089ed5df8eabcb948a7bab06cc57e74 The OpenSSF Package Analysis project identified 'lexicalutils' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in mandrill-api-ruby (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 16f2aff274da86497ad8fe6322b501a1269cd37d3ad40e227f11126aa2da5413 The OpenSSF Package Analysis project identified 'mandrill-api-ruby' @ 6.0.1 rubygems as malicious. It is considered malicious because: - The...

Malicious code in @clearing/noway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2592ca80858a15f7d2ec802616917732b71bc4ad3e71d19b5bc2e0839a586364 The OpenSSF Package Analysis project identified '@clearing/noway' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...