MAL-2024-11922 Malicious code in blz-internal-pkg_update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c0576719ed89c86b80e8064de18e089618752aa208fa88dfc410ad73e84bf8e The OpenSSF Package Analysis project identified 'blz-internal-pkgupdate' @ 7.7.11 npm as malicious. It is considered malicious because: - The...

MAL-2024-11919 Malicious code in yandex-pandora-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7c8829575ea2c09d2db8f6f98a73635e882f6ac8084b06174761270128f3438 The OpenSSF Package Analysis project identified 'yandex-pandora-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-11918 Malicious code in auto-assign-team-actionn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84658b8c37896aa0e8c456f986500c73ce8af5a8e7696decc2db2a6fb7b450d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11914 Malicious code in orderly.network (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14d606d970811240b8c005b7dc9ac5ee50ff9d2d77e9a14a34703c115392b1a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @monkey-tilt/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8ac39833535be0553f3d6a87a64286940b30b0fc55a5e1c80c907518b10053b8 The OpenSSF Package Analysis project identified '@monkey-tilt/ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in start-decent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74681df6bc6b8b3247624569b8632e201a6fac47376cc8561d59fccc697d83ab The OpenSSF Package Analysis project identified 'start-decent' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in pokedex-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23c03b4e03986cba75894fb0016bc2e1feb0c72ef2c06287030498b8f7a48ea1 The OpenSSF Package Analysis project identified 'pokedex-vue3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in label-merge-conflicts-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f4e7055373f34da86b2f4a870acff07073a74806372655dd69ac315c6c598d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11874 Malicious code in react-vis-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis add23f4d15e6249dcdf1487e1ba15a538376d6c820e7afecf316deaf47dbd959 The OpenSSF Package Analysis project identified 'react-vis-website' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11873 Malicious code in ui_next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 623f5936c73485ef7c1a60a9287d34cb92015b753a345a1e2989dfffcaf933ff The OpenSSF Package Analysis project identified 'uinext' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in 32red-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61467e40b369ce42bb9addcd5f11f62f444c0a9cf8e30253f0d5ca79697c68a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e16d461f49ce237448a5ebe2cecd68f816f19e3209965bc445d5e57a89ff938b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11863 Malicious code in 32red-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7c76ac7d57265d4cc494b13ff1a0000ff8cbe225dea90e42a200545dd8359e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-api-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea3623ead06a5bd298fe1d4801b7c71c6729b130919b4eaf32b6f6ff94a7c1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 32red-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ed89d9090f04408f9fe5a5788a75ae961c0e656eafa0ea294b9974471655b3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in orderly-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6d1816f12ad3d52d2229d938ccf0f5ec2b0f48ba66613c031b72631e23cc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 725d2bf04ddf915f303fabf69710fc72dda0ebbd3d770b0d799f7cba032c98eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-checkout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 264677b0730aa71c63a8f92c073c2b8b7a14b4a54d291ebbe883161a4f8af43f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 25d9c93cb4354fefa9f9ef0acacce38de1f8fdf87f67ae7c3e2fbe2cb746c9e2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 000webhost-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a062b5381190f14c3f396fa21385c5ae1c204f891341b96ad8e1e5f9614ed1d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...