Malicious code in ifl-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c61d2851c227be102bd3adf8e2fd3b9636e417c5f026c3bcc2b91000551c4f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in global-min-document (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f31926381530898f76c33bf3a3941e4c37e5866d33fbe1501baa831b6822165 The OpenSSF Package Analysis project identified 'global-min-document' @ 999999999.99.9 npm as malicious. It is considered malicious because: - T...

Malicious code in profectus-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062a69a64c4e77b2e5cebc7f5d21c239c51139c4d420c9fbf2e616f23ec838a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1063 Malicious code in ycs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fcf222dfcf6f0f36588b0c11a3e0fd28bac1b86cccc3eac8afb5f9243afffb7 The OpenSSF Package Analysis project identified 'ycs' @ 3.9.9 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in unity-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d000b4d34f837a9755c05f72318c44ba0f8cf265e46224607cedae43aea73ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1059 Malicious code in booto3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 517345ec1e168770a23a0845f40ee366e2909fd1175efbb4e2292561345b5665 The OpenSSF Package Analysis project identified 'booto3' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package communicat...

MAL-2024-1077 Malicious code in @spectrocoin/sc-currencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e25c79935b85d9e21d6f39b9f9d5b8d7472c19cd2e49dd4239a6f7298e96502f The OpenSSF Package Analysis project identified '@spectrocoin/sc-currencies' @ 9.9.99 npm as malicious. It is considered malicious because: - Th...

Malicious code in c3-pricecaster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7b03dfb89422ee188083a005d46e87873b3548d2f360a07d2380736049483de0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in build-benchmarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9051e586242e7f4cb76bca3b533a915678a64eb52f0b8812e1a1d1f35e358fd5 The OpenSSF Package Analysis project identified 'build-benchmarks' @ 15.2.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1049 Malicious code in sdge-it-tdg-dynamicloadprofiles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2915d7463cc131f4cfbcbd817fe7d82a865a599cc9f59d7d0ffc6f8ac3ab87dd The OpenSSF Package Analysis project identified 'sdge-it-tdg-dynamicloadprofiles' @ 1.0.1 npm as malicious. It is considered malicious because: ...

MAL-2024-1048 Malicious code in @apics/apps-ppp-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a11545fc54b4d0cdd2e0e8de4ab835b254677aff86d325e9bec6a0a6b5e090a8 The OpenSSF Package Analysis project identified '@apics/apps-ppp-web' @ 9.39.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-1034 Malicious code in fekirinetest3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d30cf456a09063b4672e17f53005e2923a34352b7e88c52f104a389cadca5c0d The OpenSSF Package Analysis project identified 'fekirinetest3' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @dh-io-globalelem/footnote-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4022d6e9ad567de4e27943e9f7b877b7f4fc8ad0dc9e8c9dcf81738af56bc2a2 The OpenSSF Package Analysis project identified '@dh-io-globalelem/footnote-component' @ 5.990.10 npm as malicious. It is considered malicious...

MAL-2024-1007 Malicious code in @dh-io-globalelem/footnote-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4022d6e9ad567de4e27943e9f7b877b7f4fc8ad0dc9e8c9dcf81738af56bc2a2 The OpenSSF Package Analysis project identified '@dh-io-globalelem/footnote-component' @ 5.990.10 npm as malicious. It is considered malicious...

MAL-2024-1000 Malicious code in custom-solutions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 72a2a270586bc778c1c8a52b2a28ad657e33370ff5e8df12cc812823127d9a1f The OpenSSF Package Analysis project identified 'custom-solutions' @ 20.8.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-991 Malicious code in crumpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42425457cf6a4b96a2353dfbbab52426f6a871b0db230861f31e6b68513b37da The OpenSSF Package Analysis project identified 'crumpet' @ 1.0.4 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in @globalsearch/productstub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1db9198ae58933fe0f3654bbd2ac62d4b6ec815cc26dfc7544a545c48f89864a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iris-front-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed1b8ea683be3ab1a06938511d841bfbd293b36b9a8bcccedd6d794a2af3f85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in packages-analytic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 970fc09fccad26ac5a8eb48041b00f5f843260c7c594cd0211198e2b191f82c0 The OpenSSF Package Analysis project identified 'packages-analytic' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-967 Malicious code in @ssr-frontend/packages-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17a895de36109204be95b9aba4154cc6414897889ce21aed3bfa4f0a304b3453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...