MAL-2024-7061 Malicious code in prpc-client-instance.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 890706b9c002912e24d6ea56d82d7736b12c82d91cc8dc4e7a2bc97e4c1d6d9e The OpenSSF Package Analysis project identified 'prpc-client-instance.js' @ 69.69.69 npm as malicious. It is considered malicious because: - The...

Malicious code in iobeya-time-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b5b2fd0fb985e16671bbfe20f9b7b2ef8e7a62cc0050b51cea290d85574f75c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7059 Malicious code in iobeya-time-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b5b2fd0fb985e16671bbfe20f9b7b2ef8e7a62cc0050b51cea290d85574f75c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1666 Malicious code in internal-udfc-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25708e4f5f0536339a12c9bf28e659c821359f2733ff51d193cd6d74443c3650 The OpenSSF Package Analysis project identified 'internal-udfc-pkg' @ 5.5.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in vrt_hitlijst_generic_voting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a20ed6d75aeac88ae26dd73937bd6d6077de0cda9dc51a1b8da13684a71a8e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in techtrans (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b51b48f31fdc51f85be4949bacdc8fdfc307e9692a309bc335984e706f65cbaa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in symphony-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d173722bd09e0ce0c234f33cbeefd7066a3b8e6d046e120a058936146dd1109 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in operaextensions.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b9207a219bcb0da9f09f2b9c49edc832107607c624e5d9b3daa16b4c7fdf3d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mvp-website-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89574af4bb00d4c540ffc8651f5ef4bcc0f72af2368ee6e32346807e91d2e8a0 The OpenSSF Package Analysis project identified 'mvp-website-html' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in rb-info-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 795c3e45bb638b1058118c99f65db4e6f84244a2af7acbb4d6bd09a19b94dca6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1620 Malicious code in commando333333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3da17f518475bb94d3d0740d0e1fc486dcce1f4fd1c8f86b9578176c4ea04a03 The OpenSSF Package Analysis project identified 'commando333333' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in employee-schedule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71b36d3a13dcd71ba835e490919b150ec8fbc7de88517906ec7aecaaf89dcbab The OpenSSF Package Analysis project identified 'employee-schedule' @ 99.9.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in colors-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77b77addbd8ed20785c5387408e4748eea849b1a038f08b1fb90a7825fe530a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1589 Malicious code in ing-feat-lu-luxtrust-scan-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a039831f4f0151208c7b3baf088dc5e4ca8dd88bbcbc4b5317c3b5e278557e7 The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-scan-authentication' @ 200.0.1 npm as malicious. It is considered maliciou...

Malicious code in addthis-wordpress-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d8ae72ce3501b8463193222bf9bebe2913ee52bf39fb10c8c9aa2f2049ebaa5 The OpenSSF Package Analysis project identified 'addthis-wordpress-plugin' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1586 Malicious code in addthis-wordpress-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d8ae72ce3501b8463193222bf9bebe2913ee52bf39fb10c8c9aa2f2049ebaa5 The OpenSSF Package Analysis project identified 'addthis-wordpress-plugin' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1587 Malicious code in ing-feat-grants-granting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dd31269fee3651913ad04ebb491f4b2800b884e18bf1fe58bfdcaa172bedb657 The OpenSSF Package Analysis project identified 'ing-feat-grants-granting' @ 200.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in ct-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e783edf3831848aac61070e6d4fcd03fb9023946d4c766f49e7d35b0403baa6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in aws-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30bda5bff5f57af1051023ce71acba6b09efbaa75367bd8a05831377244491c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1559 Malicious code in scm-design-system-cra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a41692a79d6b73b049dbff75d56c8a18218a4878d024ef4c0da7b19b16ebab3a The OpenSSF Package Analysis project identified 'scm-design-system-cra' @ 0.1.1 npm as malicious. It is considered malicious because: - The...