MAL-2023-7942 Malicious code in twentynineteen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41e718fa7d54fba600dedc033d1d1c93b282fdae82403869bf77c53363acf842 The OpenSSF Package Analysis project identified 'twentynineteen' @ 2.5.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in nequi-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf1340504c1cd5ad13f47a2e8c92aa8f58b41f2bfc9cbe68f77c055215dd9122 The OpenSSF Package Analysis project identified 'nequi-api-utils' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7925 Malicious code in nequi-api-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf1340504c1cd5ad13f47a2e8c92aa8f58b41f2bfc9cbe68f77c055215dd9122 The OpenSSF Package Analysis project identified 'nequi-api-utils' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in emails-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ddc90c0866243db5fa4b1832affff6a24b819654f1cc4a03c1930ceda374059c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dpdgroupuk/design-space-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d6e51ab6c7050e707d28d79d239a607feea9a777c9db5f9a4765ead15613168 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1563 Malicious code in sketch-71-symbol-resync (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6f850b539539800e75073f80c17bd8308630e63ec70240f60f65b625c85ae0b The OpenSSF Package Analysis project identified 'sketch-71-symbol-resync' @ 99.99.0 npm as malicious. It is considered malicious because: - The...

Malicious code in rb-journey-details (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b743557ed9835339d75bb8b71101ba1c088ce15ad0081bae310b2b405e24c01 The OpenSSF Package Analysis project identified 'rb-journey-details' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1497 Malicious code in code-debug-codes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c78c334cc38295767013c4a8b7bd904fd09069e4b7f938183d8c247eefb27bec The OpenSSF Package Analysis project identified 'code-debug-codes' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1498 Malicious code in jscrambler-cookies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2030b82f282ea6a8622a42dfe9e944d63773863556536a6b8413c1141237854b The OpenSSF Package Analysis project identified 'jscrambler-cookies' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1490 Malicious code in bugsnotfound (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3980d08da6629463ad50e50b6a94591add7f48be24c1256a14e6d3e56fe69f55 The OpenSSF Package Analysis project identified 'bugsnotfound' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in postman-zendesk-support-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3501f72f7b7c1700a90f7ad5e3a55cd2462c210637c68dc75f9d336e9bf0063 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-data-constructor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fc7101aab5c7172a2ab40e0e1ce62dbd251d5301f5efb5f4c30cab065bb5cd The package's preinstall hook auto-executes index.js on npm install. The script imports https and os, collects os.hostname, os.platform, os.arch,...

Malicious code in marvelmaniac-devvit-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9d8f161a565dceb33bc07806d7e65aae706550b73220940a4ff28cf2a50d5f The OpenSSF Package Analysis project identified 'marvelmaniac-devvit-rce' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1485 Malicious code in top-gun-maverick (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c0918c52d62dfaec7570512c94da40ff77b2fbf449a0805b0c4c12f1c4f4f20 The OpenSSF Package Analysis project identified 'top-gun-maverick' @ 2.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in irviewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2856bec7b72be87c4b6cc3f537871ee579bda13ad09ff85f5391ea1c0fdfe660 The OpenSSF Package Analysis project identified 'irviewer' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1471 Malicious code in leostorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e88b15902b8c65f58b9996af3a305c1c4f93f2c859262aa2e48d4aabba1a7f The OpenSSF Package Analysis project identified 'leostorm' @ 2.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1455 Malicious code in bugvsme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d0f6358966f26aa77ad48efa632c53f6ac44fc322dfe78fbe31c03310c88c7e4 The OpenSSF Package Analysis project identified 'bugvsme' @ 1.1.1 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in bugvsme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d0f6358966f26aa77ad48efa632c53f6ac44fc322dfe78fbe31c03310c88c7e4 The OpenSSF Package Analysis project identified 'bugvsme' @ 1.1.1 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in false-positive-reddit-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18d0061817c889d31df1f475a5cb984705a83ac9e8117ef32c2429696d73ca20 The OpenSSF Package Analysis project identified 'false-positive-reddit-rce' @ 0.0.2 npm as malicious. It is considered malicious because: - The...

MAL-2023-1453 Malicious code in marvelmaniac-reddit-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e0c11328bba9ebf6da62d82fc149892918b5830eef9816b5f887c46f1108fa0 The OpenSSF Package Analysis project identified 'marvelmaniac-reddit-rce' @ 10.0.3 npm as malicious. It is considered malicious because: - The...