Malicious code in verycoolzpac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5375ee65b8d94a515b53e30980d783a66b8f75c2ad0f388f471e41b0dada5587 The OpenSSF Package Analysis project identified 'verycoolzpac' @ 0.39.9999 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1204 Malicious code in hyrule-react-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b82bec5139c178e3b425e5e458a9c7b248b17db5192cf6178702cbb26822dba The OpenSSF Package Analysis project identified 'hyrule-react-commons' @ 2.0.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1348 Malicious code in xdefi-distribution (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 352ef361ef8485fc98aa4e128cd2942a1de8926508bc3b2f76b0cbbe831ee3af The OpenSSF Package Analysis project identified 'xdefi-distribution' @ 99.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1411 Malicious code in spammingsynonyms (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b06c2a9bef8741ecd851e448b284d8c0eef63b726a77662a1e4f3aec34119f80 The OpenSSF Package Analysis project identified 'spammingsynonyms' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in iiris-new (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 402b426bbd1aa99236a63b04eea18d9cf2d9a61b6be5a6b3baefd87dd4f1cc32 The OpenSSF Package Analysis project identified 'iiris-new' @ 2.0.16 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1292 Malicious code in seafoam-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11b7b515412cb320d382cffb4a3abe4fa232556d7db6ac3dde904bd295b279a3 The OpenSSF Package Analysis project identified 'seafoam-desktop' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1109 Malicious code in a2b_hex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 38743aff6be978cb844cd16551bd10ecef79a790d4b14710d720031cbeb492d6 The OpenSSF Package Analysis project identified 'a2bhex' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ba3635b5a021d627f0f232cf46f53846cc953c75659700eae5ee919ebfca455 The OpenSSF Package Analysis project identified 'eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests' @ 1.0.0 npm as malicious. It is...

Malicious code in another-dev-dependency3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2abbde4690eaad1109288e153cb368899f235ec85219b2f867f2f11cfad6a078 The OpenSSF Package Analysis project identified 'another-dev-dependency3' @ 3.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in spring-boot-admin-virgil-custom-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3bf8c73b2a5a04555aa1692341d9861a37ad32f428b123c88751322e74c66d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1337 Malicious code in virgil-spring-boot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7b81762635da58744d7567d3ac4b1bf12da5d3c72070a9d2260d40463fcdbb The OpenSSF Package Analysis project identified 'virgil-spring-boot-starter' @ 20.0.0 npm as malicious. It is considered malicious because: - Th...

MAL-2023-1129 Malicious code in capacity-planning-projection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7ac9faaa73ac47db42566e3a2cc701408654503c387c47528d9fb69d6545da1 The OpenSSF Package Analysis project identified 'capacity-planning-projection' @ 9.1.3 npm as malicious. It is considered malicious because: - T...

Malicious code in opbox-seller-shop-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c62594db29ca0473a517e2d3ed643575d938a4d43a58ee4420b2b304b8121b32 The OpenSSF Package Analysis project identified 'opbox-seller-shop-service' @ 99.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in tempomati-omega-69-emcuf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a012c605870034511688f664880e997bc8423cd7707f3de28326adc144f4fb4a The OpenSSF Package Analysis project identified 'tempomati-omega-69-emcuf7' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1316 Malicious code in tempomati-omega-5-emcuf5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f86820db1cc72b3ab2076578417815de7e0bc83b54e954f68b41a7adf28dd66 The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf5' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in tempomati-omega-5-emcuf311 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 865979d6590ceed06ce4e4e3bcc1ad05be4caec6967f82f7654fa9e709ca97fc The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf311' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1315 Malicious code in tempomati-omega-5-emcuf311 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 865979d6590ceed06ce4e4e3bcc1ad05be4caec6967f82f7654fa9e709ca97fc The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf311' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1352 Malicious code in zsbpwebsdktest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 347bc418b55e9092cd6a48ff3f93f328085fa2c4192ba6dc2c5cf062c3d10c20 The OpenSSF Package Analysis project identified 'zsbpwebsdktest' @ 9999.99.91 npm as malicious. It is considered malicious because: - The packag...

Malicious code in smart-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d5cef67a87cd4a497f6879379a3829535212f7d703197ce6d3130dd03fd2da6 The OpenSSF Package Analysis project identified 'smart-commons' @ 19.6.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1142 Malicious code in commentrating (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 87db588ebd8e7a42cbbbbf7fc21caa36fc553172a0ff4c4e9a58ce9354d62e7f The OpenSSF Package Analysis project identified 'commentrating' @ 99.9.1 npm as malicious. It is considered malicious because: - The package...