Malicious code in xsolla-login-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b87428f045bf2e5db5eadeb9cb89e2b190e6c62c05e563676d28d6baaa91c631 The OpenSSF Package Analysis project identified 'xsolla-login-js-sdk' @ 4.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in tfb-cip-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32e06870354259889acef36568293e07f1ada3677bafaba74764237fb6fef9d2 The OpenSSF Package Analysis project identified 'tfb-cip-app' @ 7.8.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in libblas3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ce6c63048cc523093131cc1ce9bdc1581093b52f97225581ea78fef61404e8a The OpenSSF Package Analysis project identified 'libblas3' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in smeeh-administration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9498162a94b3baa19086d8a3b158e7b37ed534cca2d6bc1a6e04f2749d18f28d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testingoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 195be366acb384abf4322d56ed3ac6985d510e4aea1a4c6157fd8a2fbd9c5bc0 The OpenSSF Package Analysis project identified 'testingoli' @ 1.2.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in sketch-ipsum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 722f81803d7487f9d05f1e65dfb836a6fa8821fd711b81a62cfe16061a549a99 The OpenSSF Package Analysis project identified 'sketch-ipsum' @ 99.99.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in js2restutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d759ec94669349db98c7b1d0f6d4a5b916e9a2ae8b98efe8acaa421a3824d689 The OpenSSF Package Analysis project identified 'js2restutils' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in wpi-xmldom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ca72dd827e914309265980a13573c7017021ad948c7fb748b36707a9aa85e47 The OpenSSF Package Analysis project identified 'wpi-xmldom' @ 2.2.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in snapchat-test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74175a7cb8d558510ee0b14523be60015ccb0796614898009692f129fd8f996f The OpenSSF Package Analysis project identified 'snapchat-test-package' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in zustand-rc.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f36f860dc8e345626951d6e9c0b4c8798cb5b2ef0abd7e199f44840e71831a68 The OpenSSF Package Analysis project identified 'zustand-rc.1' @ 1.999.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in gp-screens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd47b7e0b82292eb8e0cf4de06de3b9027df37daa726f014751598535afdacaf The OpenSSF Package Analysis project identified 'gp-screens' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in akita-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 114fb2289d01453676125580487fd32c170d5de19b49b286ae7b1ce9943135ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1301 Malicious code in some_internal_package_for_testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53107273160f2452143bcbee916077e6adbca0f10d5f2d80e0afeb276d92d788 The OpenSSF Package Analysis project identified 'someinternalpackagefortesting' @ 99.9.9 npm as malicious. It is considered malicious because: -...

Malicious code in deploy-workers-cloudflare-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86fc56c152b28aec95059aa473a4a560558083997bf0bb390a71e672fcd73b29 The OpenSSF Package Analysis project identified 'deploy-workers-cloudflare-com' @ 9.1.0 npm as malicious. It is considered malicious because: -...

Malicious code in google-apis-androidpublisher_v2 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 715b9e91530380e15e848bc0374f342584cdd61853308582683eb214e0da9927 The OpenSSF Package Analysis project identified 'google-apis-androidpublisherv2' @ 0.0 rubygems as malicious. It is considered malicious because...

Malicious code in firefly-utilities-helper-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1e40a9479f8d7f46dde5d530c7da4a5ac550607ec867806525a3bb749d6e76 The OpenSSF Package Analysis project identified 'firefly-utilities-helper-ts' @ 1.1.14 npm as malicious. It is considered malicious because: - T...

Malicious code in nextcloud-api-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be6d2af367680b5d332b3472317eeab4a364c78e1617e1d7f3a32f1d797fcdc8 The OpenSSF Package Analysis project identified 'nextcloud-api-sdk' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1248 Malicious code in ng-file-upload-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51cd8a582b38d577b6dc6deb3879019bd0b0c68ae7e5bf23d787aa2721e6e334 The OpenSSF Package Analysis project identified 'ng-file-upload-shim' @ 12.0.4 npm as malicious. It is considered malicious because: - The packa...

Malicious code in cypress-typed-stubs-example-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d06bdef719edee1677bda9a46ae9d713bed145fb60b910c15f7260b2fca5b18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in barcodeqrgen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e27682d3c0d71a71640f7d7830be4cd2125402e0509403333eb45413256f63c The OpenSSF Package Analysis project identified 'barcodeqrgen' @ 1.0.3 pypi as malicious. It is considered malicious because: - The package...