MAL-2024-9101 Malicious code in monorepo-releaser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b3f0eac35d839a6b3f530ebb25ef4577ff48bdafa60122e929828d1849ec989 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-api-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 14532f4785bce55a885a6fd2945c9705ab690e1385adeee16c6d8d2d9420b4b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bolteu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4bd2a7cf68d796d1274d10ce0e343341543e85f964224249a958802918b2482b The OpenSSF Package Analysis project identified 'bolteu' @ 8.2.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-9092 Malicious code in hulululu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 50cd582df4ddf139ea1ee884391d575059485ee4b4b14852d9b845ab23f53121 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @linx-ui/pharmacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b11f58a8b099193bd554037a57e978c958facba9835da91b672d8bc2155062f1 The OpenSSF Package Analysis project identified '@linx-ui/pharmacy' @ 4.2.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9086 Malicious code in @linx-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70dd8ec71455f4177650ed33f72b8da1f8067e2afbebd634836da68f44cbc53 The OpenSSF Package Analysis project identified '@linx-ui/shared' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9083 Malicious code in hotels-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bc89d8c1cd178341947d46f998ed1e1915c4d6d5aa787e8e939b51ed463de409 The OpenSSF Package Analysis project identified 'hotels-widget' @ 99.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9082 Malicious code in should_be_whitelisted.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2bdcbf3b9af97d69ba20e716c6917837abe6b881080b90b816fffb03c9ea288f The OpenSSF Package Analysis project identified 'shouldbewhitelisted.js' @ 10.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9081 Malicious code in @test3.svt/first-npm-package-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c1c2ce1077d3778b7ed51e8d98f9ba6a9cd57e2be0c134fe9bda021d3a10248b The OpenSSF Package Analysis project identified '@test3.svt/first-npm-package-test' @ 1.0.1 npm as malicious. It is considered malicious because...

Malicious code in speech-to-speech-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947b44b1c26d3fdd2e1470d18b34076e52b1506fbadbdf85505632a63e4b6c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dx-hotels-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757cbf55b30ccb4cbbf7c26afbc8eb1493280155f0ae8578700044d07a611f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9038 Malicious code in @plentyofcode/header-bidding-adslot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af5eb7081dde9d70a0712995098c35c53b72258056714c3dbefd6a3d194d6ed3 The OpenSSF Package Analysis project identified '@plentyofcode/header-bidding-adslot' @ 2.0.36 npm as malicious. It is considered malicious...

MAL-2024-9033 Malicious code in tesgotestpytest-npm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5967a11e2661f28b2148fa4adc68edfa052e545caf5e0b6823865eb4655ab5f The OpenSSF Package Analysis project identified 'tesgotestpytest-npm-com-test' @ 1.999.0 npm as malicious. It is considered malicious because: -...

Malicious code in repo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 475962f34cf11b2eb56bc65cbb239a83bb17063ca8bb9b0f03d295a5b88e4b6a The OpenSSF Package Analysis project identified 'repo-private' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in saywh11222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66e2b9f8537aaebeea0768739ff431e4fe4c8dc5ea9bab0d191d6f555384b25f The OpenSSF Package Analysis project identified 'saywh11222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in alertsorchestration-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad590e8c8853e4883c2994808bae19870b1d76002b74c084b196e7e4ebcf6cea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in inclusive-ai-dao-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1256786c01aeb97c5bae935d007b7939062250f307c5369a6a6597e12857995c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in worldpay-raft-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4e9de320d43e5e802d970b2666de1f37e255c6fb5382d86e367bbcbeb32af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9001 Malicious code in worldpay-raft-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ce4e9de320d43e5e802d970b2666de1f37e255c6fb5382d86e367bbcbeb32af3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in whatnot_seller_api_docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bd5f2c9e95b729435440515ed96f944e44f9be9e7843d90090aeef7a7a0716d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...