Malicious code in scm-design-system-cra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a41692a79d6b73b049dbff75d56c8a18218a4878d024ef4c0da7b19b16ebab3a The OpenSSF Package Analysis project identified 'scm-design-system-cra' @ 0.1.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-1558 Malicious code in cosma-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49388262dd0b3d40b1f426a488f94937d409f2ce2053702f81a099fa8ed3b3c2 The OpenSSF Package Analysis project identified 'cosma-ui-icons' @ 9999.999.3 npm as malicious. It is considered malicious because: - The packag...

Malicious code in glamorous-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a6ea39de6911785f412a5a42905522010930dec6afece74458f8b4859a0fce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1551 Malicious code in integration-web-core--socle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4bee6dc4af217ab7789d50b0fed6b7d01749bf9ef8c725c1dfee59c068f9af3b The OpenSSF Package Analysis project identified 'integration-web-core--socle' @ 1.4.2 npm as malicious. It is considered malicious because: - Th...

Malicious code in vue2-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a66e858fcc284e27c0e0ac5e2d76de3b0f6c670ac21a185369832d45f40f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1541 Malicious code in pentesters987abc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c42f65f70dff1af7f6a44a0622052e7a0f92113d52a9eb1258c158f1ff2ad27d The OpenSSF Package Analysis project identified 'pentesters987abc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1401 Malicious code in mcft_client (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

Malicious code in numberpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e10120613afbbf32d487584c68eaf1ae7f4fc0674f1f119d86beae630a3b9070 The OpenSSF Package Analysis project identified 'numberpy' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

Malicious code in reqwestss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b49654324e091538657038a1288d05e2879c02d73bec38baeae681b0a26f5b9 The OpenSSF Package Analysis project identified 'reqwestss' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1394 Malicious code in cedar-snippet (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in test-pen-testers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0838e7134c6d22d8664ea4b26efb1614b7ffc9bc6a332e5dbeab250026b7315a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sanar-website-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5343e64c2316fbb0e3c6256f74b5b0da7993903262ed71f836a93f2e929ced78 The OpenSSF Package Analysis project identified 'sanar-website-v3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1385 Malicious code in taxes-experience-malicious (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d0561362b41aad8ee7445a9593b1fb0355f25ca65142bb2a491bffd7706960b The OpenSSF Package Analysis project identified 'taxes-experience-malicious' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1384 Malicious code in protonme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 799384d837eaf8016647a521334035c49a9f48d48cce42c9d084d017128f1fc8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rich-relevance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d5443947e62cbe3633e1bc05cb45ee61214822d2115a1f87f6cf25a4c141d226 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1365 Malicious code in testpkg3322 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0204f7c4871e3d89a002e58fe4aa1f47b3e64d810fac531fbd8aa992929e0a60 The OpenSSF Package Analysis project identified 'testpkg3322' @ 2.35.8 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1334 Malicious code in multiconnections (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d080fb698cec14d7c79b82bff9f6ca58764dbfcd5b487ea88e5822e59e1d74cb The OpenSSF Package Analysis project identified 'multiconnections' @ 2.34.23 pypi as malicious. It is considered malicious because: - The packag...

Malicious code in lamia471 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5b6a082a9defb6d9d2265cf9e9dee0b5e0382c8afda6772a4ee2248d142303d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-color (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa73c73097c9d60979e46ffbf0ade4d42e388379ed02a0e7ffa10d2ce6ceaf61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1315 Malicious code in scundev-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6b38dd087840ac0c2e03a22124c4b5eead12b96f0cc99579a07a8164172c516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...