1822 matches found
MAL-2023-1278 Malicious code in rb-notification-banner (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis faed09cda269c58908aa898798259bd292fcce98a8f5a60f486a4c26bb84d15a The OpenSSF Package Analysis project identified 'rb-notification-banner' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2023-1318 Malicious code in testforconfusion (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0463d945d1cd3398ce2594034fd52775ac94fe411f1cc645f88f757522abfc1b The OpenSSF Package Analysis project identified 'testforconfusion' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in scuntest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f42cc62b8cee0d48d9ee1455debbb923baaab65c1fd45a70a726d6053cb36086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1180 Malicious code in falsepositivecheck6969 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cef392714b654bd14df8ba24c491e8844b54e08fee392bff62632f7f3e5d6fa1 The OpenSSF Package Analysis project identified 'falsepositivecheck6969' @ 9999.9.9 npm as malicious. It is considered malicious because: - The...
Malicious code in donuts.node-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b8d6fee5827de9688cc9b83812dc32e54e33531a0bd2fd179dc3e2935564dc7 The OpenSSF Package Analysis project identified 'donuts.node-build' @ 99.99.104 npm as malicious. It is considered malicious because: - The...
MAL-2023-1083 Malicious code in @infinitebrahmanuniverse/nolb-cys (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 78a6474d6dca65eeaf028b44be4065be5f545d63eba6905a3f4e1ae032f85a7a The OpenSSF Package Analysis project identified '@infinitebrahmanuniverse/nolb-cys' @ 2023.1.28 npm as malicious. It is considered malicious...
MAL-2023-1422 Malicious code in yc-as-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9df89f5f0260f38e93635cc5df99e7ea267d4c07f25e1446a49c08fdf21befe7 The OpenSSF Package Analysis project identified 'yc-as-client' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...
Malicious code in roblopython (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62fff9aab2ab176cbb2e29cca29b5592fe22be3c0f020fa57bd4a931af0a40f7 The OpenSSF Package Analysis project identified 'roblopython' @ 2.0.15 pypi as malicious. It is considered malicious because: - The package...
Malicious code in store-js-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4462b056f6144f0a42e19147fcc9c5a0277e45631c26bebad88d24513995b773 The OpenSSF Package Analysis project identified 'store-js-sdk' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2023-6 Malicious code in parallel-workers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis abf4ac32d4bbbf2bca51efed2166f670c707230f7da2b87c1318cbe8ca9dade1 The OpenSSF Package Analysis project identified 'parallel-workers' @ 99.99.101 npm as malicious. It is considered malicious because: - The packa...
MAL-2023-1194 Malicious code in gtf-error-tracker (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c82adcb211353de0790c397f626068e2d5397effcfd904dcfeafd92cb450f2f1 The OpenSSF Package Analysis project identified 'gtf-error-tracker' @ 99.9.8 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1418 Malicious code in taxi-etl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee43ff79927a680e9108ebd7b3f0a932760beedbf583a5681c2732568e362b6f The OpenSSF Package Analysis project identified 'taxi-etl' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1363 Malicious code in dmp-suite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 519dd07a618b2ba0671d86ef8fa2155f33aeaacdeed9a41d7f2e5257fb737aac The OpenSSF Package Analysis project identified 'dmp-suite' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1364 Malicious code in example-package-taxi-etl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc9af8fd35e3ce951b8d314b087c20afbd1ed1eeb3ff9441b0ea5d5ac5576e5a The OpenSSF Package Analysis project identified 'example-package-taxi-etl' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...
Malicious code in react-div-100vh-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b9718c1f5170d44298bb0ef93d114e752ea42231e924e5c895add2f21e3c18a The OpenSSF Package Analysis project identified 'react-div-100vh-test' @ 9.0.0 npm as malicious. It is considered malicious because: - The packa...
Malicious code in tzinfo-i18n (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80d76ff3efd3a37e90d86c31f34ad01633504eb17709869928335523c66a2a55 The OpenSSF Package Analysis project identified 'tzinfo-i18n' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...
MAL-2023-1328 Malicious code in update.electronjs.org (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 570da49a43c941cec1292b434882e33fa9b0d622894934efe87b8cf494184da6 The OpenSSF Package Analysis project identified 'update.electronjs.org' @ 99.9.9 npm as malicious. It is considered malicious because: - The...
MAL-2023-1238 Malicious code in mm-docs-v-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e164ce9b5bafc633c26d087af362bfe0ae909af588fc1b193b9c79f3b956c030 The OpenSSF Package Analysis project identified 'mm-docs-v-2' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in bleeding-edge-css (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9158e7fb120bf930c7e6ed6c50765fdc9d7c3d1a40435bf8a4b4d202cfd1dd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dream11-fc-icons (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5dc3d2ee3ad7ffe496784962936c16152411b411fea5dc756874f7bcfdf7c21 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...