Malicious code in uui-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 20e448a4d82eef5d5f76dd3f8c325358b3b2df9e1d124b28a4a2843f466cb94a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-152 Malicious code in cagov-template-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 618cc8a0ff5658fdddb6296278644b3e69634530941e19fd1b9985c757df7888 The OpenSSF Package Analysis project identified 'cagov-template-development' @ 9.2.1 npm as malicious. It is considered malicious because: - The...

Malicious code in materialxtest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98caac4513156692e87224323de637a922a6802ab80e04a0b3ceeceb8602764a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in librct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f5f02ff35835e34a22c3e1381a0888b755d52334e14e61160dff3b9ec4e08b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-133 Malicious code in analyticstracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22e16b35e3a4ba04d9de144b44c96e7bd8a1db26c10c0d57c206529d00436f8d The OpenSSF Package Analysis project identified 'analyticstracker' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-131 Malicious code in pd-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b46ebcb2f76102916a1ab764b5af360b8c6cdd1dc56a269538132bcc4e307983 The OpenSSF Package Analysis project identified 'pd-ui-kit' @ 1.5.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in testing-dep-collab-obsfucated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5a66859a22b9608532f75d7748aee57740c8699a9204d441db0e1104e1c4c50 The OpenSSF Package Analysis project identified 'testing-dep-collab-obsfucated' @ 1.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in wdpr-node-http-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afec8bd883f6042f7047f6b0d29cd37d57ef2e6f179a717a0ee7bbf44a16fe8 The OpenSSF Package Analysis project identified 'wdpr-node-http-error-handler' @ 16.1.1 npm as malicious. It is considered malicious because: -...

MAL-2024-94 Malicious code in wdpr-node-cdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2c2f25a3f7cd69d4500c298b6a66498423b248384970031de6dc2fd42221ecd The OpenSSF Package Analysis project identified 'wdpr-node-cdn' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in wdpr-ra-node-csp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f84a83ea13684761bce489c49b762047ea5f7cb2d68aa8e38f64842cbf224840 The OpenSSF Package Analysis project identified 'wdpr-ra-node-csp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-87 Malicious code in newbooking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c36258c896dcadd103fd2263e6d19e4ae885350c438c2efc971e816f7d39215d The OpenSSF Package Analysis project identified 'newbooking' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-84 Malicious code in aurora-webmail-pro (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b196e5cdd7ecb9e38cd0eb47dfc5a3b78a6533ffeb8c52c9f43722b3f398a983 The OpenSSF Package Analysis project identified 'aurora-webmail-pro' @ 10.1.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-56 Malicious code in test-devoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94d087127b055251bef2c40e4c884c82c7f4e39f4631fa5995116fb9b1d65f4f The OpenSSF Package Analysis project identified 'test-devoxx' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in dynatrace-oneagent-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b38a3f821fef1b8ddca507f11dff965bc5dddb2e2bd7d952c3b6b19103c69c10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-39 Malicious code in raspeditor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b7d1a65981576ae60116a65930e8a33501f196adc8903e31906ee0c19b9774c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in raspeditor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b7d1a65981576ae60116a65930e8a33501f196adc8903e31906ee0c19b9774c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @monokera/react-components-storybook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdf75e7663fbdb265190a8a2b33f0e6feb6e3d3cea6da8c936226cbe4c95f95c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-30 Malicious code in axelhowe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a6b8a2beae8966a71fb077b1adaef5f5a2fdd01e92c2bdfed182d06a8745435 The OpenSSF Package Analysis project identified 'axelhowe' @ 0.0.0-5VtLmtixx6V5PkcW npm as malicious. It is considered malicious because: - The...

MAL-2024-22 Malicious code in stupidrara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3893054db7f136842c9eb85d9d6c2693ee9afa0f397ef3a30c14736aae381261 The OpenSSF Package Analysis project identified 'stupidrara' @ 0.0.0-jqNHd5ZlNt7p7qpN npm as malicious. It is considered malicious because: - Th...

Malicious code in chancets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fbf9c5ae637ce86f5dd9b811e29691dbc62866f58c76f517cd6d68f03e142a2d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...