MAL-2023-1209 Malicious code in index-template-mets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 104f2ff9714322069aa6e619d7050de41349e85f4c3eaa04c4c25ba0e239e8a9 The OpenSSF Package Analysis project identified 'index-template-mets' @ 1.0.1 npm as malicious. It is considered malicious because: - The packag...

Malicious code in security-util-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2309de1524c064d7eba8b0c288762426955241d23e00eaaeca7766758ab9054e The OpenSSF Package Analysis project identified 'security-util-py' @ 0.0.6 pypi as malicious. It is considered malicious because: - The package...

Malicious code in fusion-ng-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a24d384788c5f4810ac97c4f6ab429d9ef27b7dde67f62839ca68e7924695349 The OpenSSF Package Analysis project identified 'fusion-ng-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in verycoolzpac2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50b609e8ebccac67716745b1447224238ae17c0a78499f90c48aa684d971cded The OpenSSF Package Analysis project identified 'verycoolzpac2' @ 0.0.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in verycoolzpac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5375ee65b8d94a515b53e30980d783a66b8f75c2ad0f388f471e41b0dada5587 The OpenSSF Package Analysis project identified 'verycoolzpac' @ 0.39.9999 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1204 Malicious code in hyrule-react-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b82bec5139c178e3b425e5e458a9c7b248b17db5192cf6178702cbb26822dba The OpenSSF Package Analysis project identified 'hyrule-react-commons' @ 2.0.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1348 Malicious code in xdefi-distribution (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 352ef361ef8485fc98aa4e128cd2942a1de8926508bc3b2f76b0cbbe831ee3af The OpenSSF Package Analysis project identified 'xdefi-distribution' @ 99.9.9 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1411 Malicious code in spammingsynonyms (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b06c2a9bef8741ecd851e448b284d8c0eef63b726a77662a1e4f3aec34119f80 The OpenSSF Package Analysis project identified 'spammingsynonyms' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in iiris-new (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 402b426bbd1aa99236a63b04eea18d9cf2d9a61b6be5a6b3baefd87dd4f1cc32 The OpenSSF Package Analysis project identified 'iiris-new' @ 2.0.16 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1292 Malicious code in seafoam-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11b7b515412cb320d382cffb4a3abe4fa232556d7db6ac3dde904bd295b279a3 The OpenSSF Package Analysis project identified 'seafoam-desktop' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1109 Malicious code in a2b_hex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 38743aff6be978cb844cd16551bd10ecef79a790d4b14710d720031cbeb492d6 The OpenSSF Package Analysis project identified 'a2bhex' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ba3635b5a021d627f0f232cf46f53846cc953c75659700eae5ee919ebfca455 The OpenSSF Package Analysis project identified 'eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests' @ 1.0.0 npm as malicious. It is...

Malicious code in another-dev-dependency3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2abbde4690eaad1109288e153cb368899f235ec85219b2f867f2f11cfad6a078 The OpenSSF Package Analysis project identified 'another-dev-dependency3' @ 3.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in spring-boot-admin-virgil-custom-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf3bf8c73b2a5a04555aa1692341d9861a37ad32f428b123c88751322e74c66d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1337 Malicious code in virgil-spring-boot-starter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7b81762635da58744d7567d3ac4b1bf12da5d3c72070a9d2260d40463fcdbb The OpenSSF Package Analysis project identified 'virgil-spring-boot-starter' @ 20.0.0 npm as malicious. It is considered malicious because: - Th...

MAL-2023-1129 Malicious code in capacity-planning-projection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7ac9faaa73ac47db42566e3a2cc701408654503c387c47528d9fb69d6545da1 The OpenSSF Package Analysis project identified 'capacity-planning-projection' @ 9.1.3 npm as malicious. It is considered malicious because: - T...

Malicious code in opbox-seller-shop-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c62594db29ca0473a517e2d3ed643575d938a4d43a58ee4420b2b304b8121b32 The OpenSSF Package Analysis project identified 'opbox-seller-shop-service' @ 99.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in tempomati-omega-69-emcuf7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a012c605870034511688f664880e997bc8423cd7707f3de28326adc144f4fb4a The OpenSSF Package Analysis project identified 'tempomati-omega-69-emcuf7' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1316 Malicious code in tempomati-omega-5-emcuf5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f86820db1cc72b3ab2076578417815de7e0bc83b54e954f68b41a7adf28dd66 The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf5' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1315 Malicious code in tempomati-omega-5-emcuf311 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 865979d6590ceed06ce4e4e3bcc1ad05be4caec6967f82f7654fa9e709ca97fc The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf311' @ 1.0.1 npm as malicious. It is considered malicious because: - The...