MAL-2024-10377 Malicious code in osm-legal-speed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware efce0e1706c67e16298e03b91dcd0069873eae6922136c002862891d7579ffc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in team-plain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebdcd56391e0a8cbe5d18bdf75f39c55c250567bf3c9bad328ded8ecac2360a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10381 Malicious code in @isfe-common/testing-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0513243009fb3882d731746421fa3effe8a4a86c8cef4d5d6053c63059a4b0e The OpenSSF Package Analysis project identified '@isfe-common/testing-utils' @ 9.5.9 npm as malicious. It is considered malicious because: - The...

Malicious code in @common-pattern/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22ade4254f9af0310378acce0750c95eaba714619e5cda80c46ca9226d3c2b22 The OpenSSF Package Analysis project identified '@common-pattern/components' @ 8.2.9 npm as malicious. It is considered malicious because: - The...

Malicious code in bytesap (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4eec30f2d541d35548fef109eb76c972e92203c749f615aa08f976fb9b0c2a03 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10369 Malicious code in bytesip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e2991197ed35fecd1cd6b875cde845773ed34ed5c51f1392f237ad8c9d6cb37e A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10370 Malicious code in nerst (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ac5aa6644938e09002e1da1848fe502aad6e6f7c7733210529238eacd6bfb5a0 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in baibitmf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8d93b26a0f284c5d1c8c947e71598235be7de5ec89c7da775b88d410436e33ae A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10366 Malicious code in bebitmf (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74b4aea64b0811889f65fa66cb611912e1ff91bb08f22d2e0b3b5c9b8a179a63 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10360 Malicious code in lightsequ (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 982a9ec66c32a78f5829a04aa08e2f9d29f03f317b6a69b6ae0cc1e2d8b02c17 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in lightseqe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f3ebdee7f587049da541169c6218b3bade3e1ce54144846f1f16c39fa8594d6 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bytekafka-0-15 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5080a4abcce26e927e9647316733cd5313eb9422fbdcd3f971e539e62f9ccfb2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10352 Malicious code in cml-tt-sets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf782b7bdc62c7fa7743c5fafc916bcd3c20ec2c23d89837b120d35d53659e6b The OpenSSF Package Analysis project identified 'cml-tt-sets' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10351 Malicious code in cml-cloudbase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a7c88cb2d6bbbb7ef7543877d2cfe8b297aeeb594425f0af21936477168ee455 The OpenSSF Package Analysis project identified 'cml-cloudbase' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in @douinfe/semi-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca4a86d374c7183a13c8652c4a75b56c62f904cc492c9b61506ef524c9911c The OpenSSF Package Analysis project identified '@douinfe/semi-ui' @ 9.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10316 Malicious code in mina-payout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d3fac0ebcbae2bb6f3f11eaa7aba34269f6ed4bd1aec05e6f8e2c68952b85e1 The OpenSSF Package Analysis project identified 'mina-payout' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

Malicious code in appdynamics-libagent-napi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3ccb8490c24108245e9e5e4893518e881e48f0dafa4b0ad152ab458de4e7b1b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10322 Malicious code in appdynamics-zmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edeecacb7e2c621f176ceac58920c72b087125f97bcad07341fc773c2b75ccc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in appdynamics-zmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware edeecacb7e2c621f176ceac58920c72b087125f97bcad07341fc773c2b75ccc1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in appdynamics-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70c96cea6a10d2b4ae166a690923503d2ffa5332aad78229c2768c36ca911918 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...