MAL-2023-1432 Malicious code in ptrsec_rce (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5c5f0c378deb022411d3a83e2b929f8ef8f9ad8e8eedd366e0863b7eb25d8aea The OpenSSF Package Analysis project identified 'ptrsecrce' @ 0.0.1 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in js-integration-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf524832b5a7754384bb05dae5fb10558591f104915c2f9b5518db338003a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logzio-azure-serverless (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8074eead2bd71d3495cfdab12e6563bedd4ff9235f16fe34021cace96d1d2b8 The OpenSSF Package Analysis project identified 'logzio-azure-serverless' @ 3.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1319 Malicious code in testipaketti_keketester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0d80c6896d6f1131eb5e9b88ce8f72fdfd575ff8f7666be6c09eccc7e1b13798 The OpenSSF Package Analysis project identified 'testipakettikeketester' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

Malicious code in eg-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb389cade20271770197c32e90e23b603da814949522fa67b2230203ecd9b83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in numpy-req (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b444962332036ed34a6122ae3f4595e0b05e8a2d1391aa9f7a1b06b9ab639114 The OpenSSF Package Analysis project identified 'numpy-req' @ 12.17.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in node-mac-applescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c90a8d6ec190eed8e253b50ca93f5bb713afbc8a14724e7688743c15c6e1acc8 The OpenSSF Package Analysis project identified 'node-mac-applescript' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in electron-app-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60f27dea6e7b4668b7cf3b3005c258d1ca073176e2408e8f977b1c4907577dfa The OpenSSF Package Analysis project identified 'electron-app-extension' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in mongoose-geospatial (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1ebd1ea357c03a8913204a6a43a5a9025e721beba84eeeddff75d653a4212474 The OpenSSF Package Analysis project identified 'mongoose-geospatial' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in rfs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79e642edac55949b293591df1c51b8e8739ca1dd2e99f7e82b235b168287179d The OpenSSF Package Analysis project identified 'rfs-utils' @ 100.100.101 npm as malicious. It is considered malicious because: - The package...

Malicious code in @mddsfmsdflm/itemselector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 88f4e295b9c4b793c8ffbdc4077606b6d5b61c41ab83b85bda2b46680c678174 The OpenSSF Package Analysis project identified '@mddsfmsdflm/itemselector' @ 103.0.9 npm as malicious. It is considered malicious because: - Th...

Malicious code in superagt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d417dfcd3054c03947066c9d5097e7bf561e9b05b055fd5e3caeea7275f4019f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pitito (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c402c7c9c4bff455910dd1b71d4c8d9cb7e47b0daa68d4d68eedf1649965afb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test-op-solhint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f8f315fe20128ae26be541522255c4eeab47ec166f70e54ca5a2c6cb533ae67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1193 Malicious code in grpc-web-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd95e8ffd2ce1c0ead89d2a5e832f9907583b1642bf8a0df83ca3ed78a09752d The OpenSSF Package Analysis project identified 'grpc-web-devtools' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1256 Malicious code in obao-digital-pnm-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2851227329c005fd686d849285f05ca10150bec82a22a0281a74c4cf091f3d8b The OpenSSF Package Analysis project identified 'obao-digital-pnm-ui' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in obao-digital-pnm-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2851227329c005fd686d849285f05ca10150bec82a22a0281a74c4cf091f3d8b The OpenSSF Package Analysis project identified 'obao-digital-pnm-ui' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1414 Malicious code in sqlalchemy-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e9079084215abb63a9468cc5ba89b5275afec40b081f77e9518498eb56a0c30 The OpenSSF Package Analysis project identified 'sqlalchemy-os' @ 14.0.10 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1384 Malicious code in os-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pytorch-pandas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 21d9172520d87343cf043969211d79bebee861c010da78f947a6464d138a78eb The OpenSSF Package Analysis project identified 'pytorch-pandas' @ 14.19.3 pypi as malicious. It is considered malicious because: - The package...