Malicious code in @n37scancp/highlight.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 944af106fc0b2a334ed1ab4fb6784a0b2cc01e5f795b1de3449b8deaf6560b50 The OpenSSF Package Analysis project identified '@n37scancp/highlight.js' @ 11.11.12 npm as malicious. It is considered malicious because: - The...

Malicious code in elastic-buildkite-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 889d976fe581d0e221dc91fb52cc010669d68189ba293e437a6966b6decd515f The OpenSSF Package Analysis project identified 'elastic-buildkite-manager' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in amazon-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67f6356994dd39435390e83ed9cb9495679ba7bd9430eb6deb610ff5a59ed159 The OpenSSF Package Analysis project identified 'amazon-connect' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in @hmp/casepaper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8bb73fdd83484b884e5580371baf0af1553e5c9377cfb60e55600f053b470ffa The OpenSSF Package Analysis project identified '@hmp/casepaper' @ 10.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in importlibs-resource (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e5b18ca50565bbf39ba25d92703302ffabb63cb0a0d6fde1934437d016d4cc0c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in bce-service-bos-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 455254dc1b6facea5922040875102470c6bec34eb212c1966f2fda65f5e9277e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in akshansh-jaiswal-ctf-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a21cd8cd0f3e40599808c19641304a3f52f263a31d9b68e9847bc4c6933cc80 The OpenSSF Package Analysis project identified 'akshansh-jaiswal-ctf-security' @ 99.9999.9999 npm as malicious. It is considered malicious...

Malicious code in devportal-aws-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 586c4231b2500b2299bb0a25b45ebdeaec062531b446c12f7547ab351c1b616a The OpenSSF Package Analysis project identified 'devportal-aws-lambda' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in fabric-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95e54d11b0e8b8ae3ec65bb015b953544d6e1b0e8e8d5ac3ebe884d858528d42 The OpenSSF Package Analysis project identified 'fabric-integration' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in pmcrypto-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3a1eb09bba631f290225217047eab8997cef64f4c0e321d47728fc9ee46f6aa The OpenSSF Package Analysis project identified 'pmcrypto-v7' @ 8.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in flow-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0cff9be7c9c3ff28671b9dcf41cf2da25e5f96e860a1c0a8e6d0be715487071b Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...