MAL-2024-9417 Malicious code in yogergerherhme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 364b3cb8f528aa44006944727caef3a2de94ca68d931e97cd82abcb3f2bc8197 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gerhtregefddfsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d49d2d7b46e404479e7049fd4c8e6990656fc1c00d07a94799a9d42b8213b138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9412 Malicious code in gerhtregefddfsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d49d2d7b46e404479e7049fd4c8e6990656fc1c00d07a94799a9d42b8213b138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in direct_access_theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e064b0aa00efc879c6095cc571b4d1359ef3cd9c13e1f02b5497c78d364fabef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in toolspacks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d239c651cb854e2362266a5dda32897f7ac87b2c588562cb32654989daae4eb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in j5gnpuiwerbngpiutbgn0iutb0p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0e410a6e975b8a7d6930f2fbde2be25a08fd2bc8995fc57d1794fc12eaf1e019 According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Malicious code in j5gnpfweguiwerbngpiutbgn0iutb0pfwbdfsfef (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d91b80430038c8f338d63c0fdb59ffe1bf16f35b1885fcf8c197b70078f980bb According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Malicious code in eslint-plugin-rossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 35e31ca4335b37c9acf1cc537c185f8c152911f991e75e3b8b248348d7f42e0a The OpenSSF Package Analysis project identified 'eslint-plugin-rossum' @ 7.7.7 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-9286 Malicious code in hdhh.hiijack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f90aede73c9acb03936e632fdcae78446c81d7c64d07749ea9f603f36f88d62c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in timeline-airtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82972946c40c712d890ca81684f6f8e6cf2215c45c13f10665f22be10ee7f441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-automation-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f06e180b42b483251e9be9757c11456faac61b034b2b3c0cb72e20162987c156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9213 Malicious code in @erc6900/reference-implementation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0825f74c666b813c67236d138a5b85f6e205eb8a0f30234468f1645efb18e688 The OpenSSF Package Analysis project identified '@erc6900/reference-implementation' @ 1.0.0 npm as malicious. It is considered malicious because...

Malicious code in customer-feedback-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf15dcf2318155d18aee75e77887bfe0709b51548def3d5e5906527670e25631 The OpenSSF Package Analysis project identified 'customer-feedback-widget' @ 1.5.8 npm as malicious. It is considered malicious because: - The...

Malicious code in sd-template-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1d800f01a52aafc7bee8ab45032560696e9e36ca3c902a4adc7d1245294fc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9107 Malicious code in @fdp-tools/observability (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3470fe72252929511b982b06c857fe2d4c8030b512a880c9bc15a088be17c838 The OpenSSF Package Analysis project identified '@fdp-tools/observability' @ 1.1.3 npm as malicious. It is considered malicious because: - The...

MAL-2024-9108 Malicious code in @fdp-tools/snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4b98f26659e9761c555996041aa767d2fb71d33dd1310bfad77040f26390fd9 The OpenSSF Package Analysis project identified '@fdp-tools/snap' @ 0.0.10 npm as malicious. It is considered malicious because: - The package...

Malicious code in @fdp-tools/snap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4b98f26659e9761c555996041aa767d2fb71d33dd1310bfad77040f26390fd9 The OpenSSF Package Analysis project identified '@fdp-tools/snap' @ 0.0.10 npm as malicious. It is considered malicious because: - The package...

Malicious code in monorepo-releaser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3f0eac35d839a6b3f530ebb25ef4577ff48bdafa60122e929828d1849ec989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9101 Malicious code in monorepo-releaser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3f0eac35d839a6b3f530ebb25ef4577ff48bdafa60122e929828d1849ec989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14532f4785bce55a885a6fd2945c9705ab690e1385adeee16c6d8d2d9420b4b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...