MAL-2023-1256 Malicious code in obao-digital-pnm-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2851227329c005fd686d849285f05ca10150bec82a22a0281a74c4cf091f3d8b The OpenSSF Package Analysis project identified 'obao-digital-pnm-ui' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1414 Malicious code in sqlalchemy-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e9079084215abb63a9468cc5ba89b5275afec40b081f77e9518498eb56a0c30 The OpenSSF Package Analysis project identified 'sqlalchemy-os' @ 14.0.10 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1384 Malicious code in os-numpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40ad87c585abfe0e853406f3417eab643e74d78e36679be13bdc5445899d5397 The OpenSSF Package Analysis project identified 'os-numpy' @ 3.19.4 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pytorch-pandas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 21d9172520d87343cf043969211d79bebee861c010da78f947a6464d138a78eb The OpenSSF Package Analysis project identified 'pytorch-pandas' @ 14.19.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in crypto-pygame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12204aa041b42e90b2749e8026e866fbe3d5ff07e79899073fbc585b9950b727 The OpenSSF Package Analysis project identified 'crypto-pygame' @ 10.14.7 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1360 Malicious code in crypto-pygame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12204aa041b42e90b2749e8026e866fbe3d5ff07e79899073fbc585b9950b727 The OpenSSF Package Analysis project identified 'crypto-pygame' @ 10.14.7 pypi as malicious. It is considered malicious because: - The package...

Malicious code in requests-pandas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 466aafb46bc841bddc0afbb05274ddf5c303d04e389298842ce36325e6809744 The OpenSSF Package Analysis project identified 'requests-pandas' @ 3.10.17 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1403 Malicious code in requests-pandas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 466aafb46bc841bddc0afbb05274ddf5c303d04e389298842ce36325e6809744 The OpenSSF Package Analysis project identified 'requests-pandas' @ 3.10.17 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1405 Malicious code in scikit-learn-matplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d5e86444b47f8ee729dcf7930f4ba68d938ea99b786e110e5d7bd53f081fa9 The OpenSSF Package Analysis project identified 'scikit-learn-matplotlib' @ 6.12.17 pypi as malicious. It is considered malicious because: - The...

Malicious code in sys-scikit-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a43a0e5d5c9f583954d954b1a27badf0220728b50a05983479b1e2e212e8c16e The OpenSSF Package Analysis project identified 'sys-scikit-learn' @ 17.8.18 pypi as malicious. It is considered malicious because: - The packag...

Malicious code in pyyaml-selenium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9582f8c7828335bcf6299260ea76656239fbbc52addbad1db96f04025109ead7 The OpenSSF Package Analysis project identified 'pyyaml-selenium' @ 1.15.3 pypi as malicious. It is considered malicious because: - The package...

Malicious code in beautifulsoup-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc11085b5c187111cb280cd12d78f3ba5b635e03348df14b3d2a116a57d2c7a1 The OpenSSF Package Analysis project identified 'beautifulsoup-requests' @ 12.15.13 pypi as malicious. It is considered malicious because: - The...

Malicious code in requests-flask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c161ba3569bb42a4df0893e7bcb73dff9fc8371d01638f7fe27ecdf9011074f0 The OpenSSF Package Analysis project identified 'requests-flask' @ 16.9.16 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pytorch-pygame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b4d07e646a51314cbd80fbeca6a94710d46a4d72598742c1ba79008e84d2822 The OpenSSF Package Analysis project identified 'pytorch-pygame' @ 0.6.19 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1413 Malicious code in sqlalchemy-install (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ce12486a1a8196d6697337e961e7b9410b2fbd2b426fb7fe0005a6a08db2255 The OpenSSF Package Analysis project identified 'sqlalchemy-install' @ 10.9.4 pypi as malicious. It is considered malicious because: - The packa...

Malicious code in pylint-sys (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b069b475056c2219d8f5f62b9e0479ba4dfb9a18639f9afd674c9ef90359882d The OpenSSF Package Analysis project identified 'pylint-sys' @ 8.15.6 pypi as malicious. It is considered malicious because: - The package...

Malicious code in keras-arg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32a0f3bb37cc11bc53e1eae707f72ba2dea5ea32aa1c3a1a631de2254b9a00de The OpenSSF Package Analysis project identified 'keras-arg' @ 19.14.9 pypi as malicious. It is considered malicious because: - The package...

Malicious code in stripe-terminal-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e6a4f5507735b6704fa9b04425050a6609564e66e4ad031bbc07e7900ce5610 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in microsoft.quantum.sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cfe7f01c2851d89caea2832921f637fe33c9ba87bb2421a8005fcb0295cb2e6 The OpenSSF Package Analysis project identified 'microsoft.quantum.sdk' @ 0.28.263081 npm as malicious. It is considered malicious because: - Th...

Malicious code in docs-component-follow-public-pop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee5ed5d036b992d7f499e1931abb9513f56db1572a9ea4d5fc7cc45e2140f5ad The OpenSSF Package Analysis project identified 'docs-component-follow-public-pop' @ 1.0.8 npm as malicious. It is considered malicious because:...