MAL-2023-1100 Malicious code in @productiv/compass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a97b703e74e87a29dd6fea72328c64bc3be108c5739692bfffaaf37abaf5c586 The OpenSSF Package Analysis project identified '@productiv/compass' @ 12.0.5 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @cima/prism-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f49996021053433e43b19a3a4ae21a731784fc9b4d053c1ee07dea4613dd76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vote-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

Malicious code in meetingsdk-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gitlab-glfm-markdown (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e04df4c0bb1f91ce34ee36e4731ee580ff1e7a1131cafd97a660d90f4c4cfb1 The OpenSSF Package Analysis project identified 'gitlab-glfm-markdown' @ 7.0.1 rubygems as malicious. It is considered malicious because: - The...

Malicious code in next-with-frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251ac37afbe61350facc80a00faa97821168ad425857f580f6fa33910fbd78eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyjwtrequest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 048f93df54854431a2f36a8645a1966e5dca77f5effa1f5c9c20c21df6956423 The OpenSSF Package Analysis project identified 'pyjwtrequest' @ 1.0.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in mesos-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ca86e4f7655ee05071ef73a17f239df8dcc483b932ef71d351cf47e8435376b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in criteo-static-variables-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ae832c9a084b0c39c57bf3bb68ff1877e5f1370b9c29e564368e0a2d224d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angular-mep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 681355ff3db8d03fa0216e4ff152cb0be7e3cd485423c68fc2d3b33c8feae3a5 The OpenSSF Package Analysis project identified 'angular-mep' @ 1.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in grocerylink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c167b1a59e67f43b700baa8db7d39f8bb9a6e73f21b40a018e400d0eec5ae2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flutter_appsflyer_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 925db0740f51975e7310d7357f8e32c78cb9d96496fc52915d6eff365500204a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1345 Malicious code in workfront-rte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29da7f471e2f22aa3a14670bb0d11d78a1ee7650004b4316a0a1448b0b185be8 The OpenSSF Package Analysis project identified 'workfront-rte' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1235 Malicious code in mfe-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1277 Malicious code in quarry-connected (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c875d815dcc55750fdec27a84807be3eca1bca0372ca5631501bcc7010b9365 The OpenSSF Package Analysis project identified 'quarry-connected' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in usaa-combobox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e892dcf4e3ded1dbf0fcc40f606985a800f80c2d34bc734649a22cec7256fe4 The OpenSSF Package Analysis project identified 'usaa-combobox' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in pesa-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 35638e48d3366cc403349a519a4cfc7af6213a9eba4622bbeec1ee3e8ceb3449 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1423 Malicious code in att-codekit (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 004ba0a87bf93fad7e23fc134ea62c1fad90d2917fff3ad6ca64a87adf16f69d The OpenSSF Package Analysis project identified 'att-codekit' @ 5.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in dependency1338 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4342f154d7ceb9727add670c55348d65e1b2c18232cbf166d82257971ad05712 The OpenSSF Package Analysis project identified 'dependency1338' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...

Malicious code in qrscrappers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b4db14e6db692ed154ddb9d82597d24bab338cabf83121f852118001db06b92a The OpenSSF Package Analysis project identified 'qrscrappers' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...