MAL-2023-8311 Malicious code in cohort_sdk_js-darwin-x64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abc50fadc1925fd27cf2d8f5e59cfe3992cf481db078f520b50ded4fc10f43c4 The OpenSSF Package Analysis project identified 'cohortsdkjs-darwin-x64' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in cephlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f82a5ba62b790856947d686397170162bf743b168fd9d66008ed6501b465d5af The OpenSSF Package Analysis project identified 'cephlib' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

Malicious code in nnabla-ext-cuda101-nccl2-ubuntu16 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70047d0a5eb542220386cc3c3f7f8bd4bee3faa63ce2124f363abcc1503be3df The OpenSSF Package Analysis project identified 'nnabla-ext-cuda101-nccl2-ubuntu16' @ 0.0.2 pypi as malicious. It is considered malicious becaus...

Malicious code in f0-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88d158c8b80ebe1a6b91c3a98408f43ffb8cac42f972277e81034cec453be0ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopify-currency-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce5f47f0fb8050c5ba0e74637e692ba095f4628070a3087b67db81de6deca0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in himanhutest57gggg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bfa2aec23b268d14e5afc0af068c41f2cce81dedebf5c6cf6051a17ebe5f45fa The OpenSSF Package Analysis project identified 'himanhutest57gggg' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in poc-nvk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10eb10880328aea55a7c7620d283f145ebcb574bfc98567eef9ad44d1ee8fcdb The OpenSSF Package Analysis project identified 'poc-nvk' @ 0.1.2 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-8289 Malicious code in nvkvictim-poc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d0c415815934e3c66b707f8613100479590a1afe4a29fc46c607999157536e2 The OpenSSF Package Analysis project identified 'nvkvictim-poc' @ 0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in @zpp/campaign-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf91721d9ccb3de458db5333c68a7144fbf85950c53ad2ee5c0086124814a1cd The OpenSSF Package Analysis project identified '@zpp/campaign-widgets' @ 10.9.2 npm as malicious. It is considered malicious because: - The...

Malicious code in materialxview (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1b0129f95fe66ebf987bfa6a5be63ab5f66e779e9f3f2ce406d0966d43f75db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8266 Malicious code in epicgamestoggle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ce8cf223ee5049675959ae63d69ac8dc4097b3ceb5b795ae832d13b85f7cea5c The OpenSSF Package Analysis project identified 'epicgamestoggle' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @atbdigitalteam/ui-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2756dc0ffc0a9cddcb70299b7fc1cb3722a348f93647bf237c1f130ecb60ff02 The OpenSSF Package Analysis project identified '@atbdigitalteam/ui-widgets' @ 2.4.1 npm as malicious. It is considered malicious because: - The...

Malicious code in zenfi-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a75914f8d0929ed48294224224fab435793f654258889e4435c268b34d2ac4c The OpenSSF Package Analysis project identified 'zenfi-sdk' @ 1.5.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in csm27878 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0055598a8a443f1bd67fa612291473dcb36ba6e1c9927df85775eea3d207de11 The OpenSSF Package Analysis project identified 'csm27878' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in csmqrcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be3c7341134e3f6e8c5e298589bbf69296fe3056e225eb82b91aa3d23f5898a The OpenSSF Package Analysis project identified 'csmqrcode' @ 11.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @ltd2research/tldrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b91e4540f7f53e684e429ddaece0e59adb5e02fb0e24c2faef4200ee61771875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8223 Malicious code in @hnbi/searchfeuikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc2a084aa0cb1894201a316f58f41e4ec30f5b5cb2e4d0fbe2d514c544064de4 The OpenSSF Package Analysis project identified '@hnbi/searchfeuikit' @ 3.1.4 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @hnbi/searchfeuikit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc2a084aa0cb1894201a316f58f41e4ec30f5b5cb2e4d0fbe2d514c544064de4 The OpenSSF Package Analysis project identified '@hnbi/searchfeuikit' @ 3.1.4 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @ms-mwf/moray (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f6aa5d1e70a75cd04a649afec90fd43acb9a5ebdbeda194fdb47cd288ecd670 The OpenSSF Package Analysis project identified '@ms-mwf/moray' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8221 Malicious code in @ms-mwf/moray (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f6aa5d1e70a75cd04a649afec90fd43acb9a5ebdbeda194fdb47cd288ecd670 The OpenSSF Package Analysis project identified '@ms-mwf/moray' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...