MAL-2023-1181 Malicious code in firefly-utilities-helper-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1e40a9479f8d7f46dde5d530c7da4a5ac550607ec867806525a3bb749d6e76 The OpenSSF Package Analysis project identified 'firefly-utilities-helper-ts' @ 1.1.14 npm as malicious. It is considered malicious because: - T...

Malicious code in signalr-temp-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 001810ee89c4e150cce7a1b0e7aef619fc71752b514250543e9e7adbef908c4f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1162 Malicious code in dontsweatthetechnique (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bbda5728889893ceed46e14cad0f90a4e884b8e92aed8cc3a824288c2e16a5db The OpenSSF Package Analysis project identified 'dontsweatthetechnique' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @obg/gtm.types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c49019b18d394a7faef47a1333687dacb2f9e2489953e8eddf211df2733d496 The OpenSSF Package Analysis project identified '@obg/gtm.types' @ 99999.22222222.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1100 Malicious code in @productiv/compass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a97b703e74e87a29dd6fea72328c64bc3be108c5739692bfffaaf37abaf5c586 The OpenSSF Package Analysis project identified '@productiv/compass' @ 12.0.5 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @cima/prism-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f49996021053433e43b19a3a4ae21a731784fc9b4d053c1ee07dea4613dd76a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vote-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...

Malicious code in meetingsdk-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gitlab-glfm-markdown (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e04df4c0bb1f91ce34ee36e4731ee580ff1e7a1131cafd97a660d90f4c4cfb1 The OpenSSF Package Analysis project identified 'gitlab-glfm-markdown' @ 7.0.1 rubygems as malicious. It is considered malicious because: - The...

Malicious code in next-with-frontegg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251ac37afbe61350facc80a00faa97821168ad425857f580f6fa33910fbd78eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pyjwtrequest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 048f93df54854431a2f36a8645a1966e5dca77f5effa1f5c9c20c21df6956423 The OpenSSF Package Analysis project identified 'pyjwtrequest' @ 1.0.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in mesos-term (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9ca86e4f7655ee05071ef73a17f239df8dcc483b932ef71d351cf47e8435376b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in criteo-static-variables-datasource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ae832c9a084b0c39c57bf3bb68ff1877e5f1370b9c29e564368e0a2d224d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in angular-mep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 681355ff3db8d03fa0216e4ff152cb0be7e3cd485423c68fc2d3b33c8feae3a5 The OpenSSF Package Analysis project identified 'angular-mep' @ 1.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in grocerylink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3c167b1a59e67f43b700baa8db7d39f8bb9a6e73f21b40a018e400d0eec5ae2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flutter_appsflyer_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 925db0740f51975e7310d7357f8e32c78cb9d96496fc52915d6eff365500204a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1345 Malicious code in workfront-rte (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29da7f471e2f22aa3a14670bb0d11d78a1ee7650004b4316a0a1448b0b185be8 The OpenSSF Package Analysis project identified 'workfront-rte' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1235 Malicious code in mfe-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 976982bf72cee0087094ae0b3d8c7b6bfd8e5efd18fb3efa3f192b175f6df360 The OpenSSF Package Analysis project identified 'mfe-test-utils' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1277 Malicious code in quarry-connected (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c875d815dcc55750fdec27a84807be3eca1bca0372ca5631501bcc7010b9365 The OpenSSF Package Analysis project identified 'quarry-connected' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in usaa-combobox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e892dcf4e3ded1dbf0fcc40f606985a800f80c2d34bc734649a22cec7256fe4 The OpenSSF Package Analysis project identified 'usaa-combobox' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...