Malicious code in @toloka-tb/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c655dc69b310808896f252e5607b9dd8c4bd54b9d139caa655f5816f2269abd4 The OpenSSF Package Analysis project identified '@toloka-tb/core' @ 2.5.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10330 Malicious code in wawawa123s12sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3373d6cdf1ebe94927b4ee361ebbcb1ab21ae82c95836e692ecd16fa1b8eca49 The OpenSSF Package Analysis project identified 'wawawa123s12sd' @ 1.3.10 npm as malicious. It is considered malicious because: - The package...

Malicious code in abdef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb2fc563b8826f4b9b042759ccb550c442aefe0af7c3c96fe10ec0895cc02ff The OpenSSF Package Analysis project identified 'abdef' @ 1.2.9 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in cms-core-redux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3940178777e39b1b416f9ed8d09fdf519cf9f5a3e2de2361da01655b196991d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cb-global-design-system-tokens/tailwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f263b2c460c81b4e6f61cc1ce72351cf2f0b2d9ff3b745181715ca4296e22e2 The OpenSSF Package Analysis project identified '@cb-global-design-system-tokens/tailwind' @ 1.0.21 npm as malicious. It is considered malicious...

MAL-2024-10269 Malicious code in @wf-wfria/ria-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6704722f829f142a06f1ec217b553b1824ff3b10d283dbe1a492b45c100859d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in custom-ui-extension-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5118124877f1b10d3a788f122b5860bb073bbb94ce2f89305ab74521ade9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oneui.angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bbff39f683b1b6c064ebc065aae50d8fd4123b1b53b7f90bed51db2d19562a6e The OpenSSF Package Analysis project identified 'oneui.angular' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...

Malicious code in acl-icon-font (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4489b16998820b6266bd347e1334303e6127e834aae4103899a3aeb7cbbc9887 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10227 Malicious code in @woody-mrs-potato/utils-banking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69debf19a38ac2408ae18cd25b408c34eadd0ebd68fe0e06377b9719dd82784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ohcm-polymerase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ed5d7615b41cea1ded4a590d20e42f353b3a6e43315a2eac25a8c63ab6607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pwn2day-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0511d29fc5da2e5b913f1015e3a397abcd973ec98bffbff3b41a857ba68dab31 The OpenSSF Package Analysis project identified 'pwn2day-shell' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9449 Malicious code in xcampaigntracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8d8ff4488a27607aa418c02ed90d132421d6a89542974b243b332c804c0d7b05 The OpenSSF Package Analysis project identified 'xcampaigntracker' @ 4.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in sn-flow-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c83ae0b3aa74be7de2508ec17549e3bc00e40edd30c62322e91be77ea48e69 package.json declares a preinstall hook "preinstall": "node index.js" that runs index.js automatically on npm install. index.js requires childprocess...

Malicious code in unity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca5747856927b0c97d3b66882120df5fa30a88c49728022ee836563ea39ea4 The OpenSSF Package Analysis project identified 'unity-components' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in capi-param-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4506a65382f9502c37e84c02f2a48ef665a903470e3c981ab60a5c8ef9f6d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9438 Malicious code in capi-param-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e4506a65382f9502c37e84c02f2a48ef665a903470e3c981ab60a5c8ef9f6d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in atg-superagent-retry-delay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75f0747e74a5e0a7d519918b8aceef9e8f4f9eaa0ad1854c1954276bb1c5166c The OpenSSF Package Analysis project identified 'atg-superagent-retry-delay' @ 100.100.100 npm as malicious. It is considered malicious because:...

Malicious code in @ciam-expressjs-vanilla-samples/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc28deadcf9235665f79c65d92ca7684f27361c14efa6bcd44ad82b40947b9df The OpenSSF Package Analysis project identified '@ciam-expressjs-vanilla-samples/shared' @ 1.0.1 npm as malicious. It is considered malicious...

MAL-2024-9413 Malicious code in nimiq-validators-score (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54b43acb2afa91f23243dfba4c5067ee0cc8746f3f211a900383bf47bec6a946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...