Malicious code in axp-product-ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5285fb9646b0435fb4ae3204b5975277243e149fc95c187c5c65e2fa0609389e The OpenSSF Package Analysis project identified 'axp-product-ducks' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8955 Malicious code in storj-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c29c7e82f958f9ed89af6fc324d687bfe4e15d4b2aa49fee39f5aeeb4eee5583 The OpenSSF Package Analysis project identified 'storj-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @live-backstage/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59a85f5255ffeaed2480c5affaf5967984d6b21631800dee033bd1c44c762ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in byted-cg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90e251b9f3c49de738ecec6d31759290c20383f748735d901d797110fd1b6fb2 The OpenSSF Package Analysis project identified 'byted-cg' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7836 Malicious code in health-check-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef9d93b4469df4d458d4c4a226b45fa7baf7760a84cd3d8b5fc84fb990e0e6ba The OpenSSF Package Analysis project identified 'health-check-nodejs' @ 3.16.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-7599 Malicious code in sap-balance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 30cd940ca221a7d39311880e508f74779101c1ae9751beb4fa648abb2b0a6266 The OpenSSF Package Analysis project identified 'sap-balance' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7582 Malicious code in sap-authorid (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 09914638ace6a85961e1642543b20472ba7751ceeb7287075487e360881c1ff3 The OpenSSF Package Analysis project identified 'sap-authorid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7482 Malicious code in secnav (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a9e8a7599691831cd3f6a1111dfd17e5b50219d9eabcfffa1ff08edb10be6d8c The OpenSSF Package Analysis project identified 'secnav' @ 69.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1667 Malicious code in @wdp-gov/lineage-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b30855ea8cc386194da24bd8f34fefc9372384eef6482801222bd4b23fa7a172 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1628 Malicious code in rb-info-banner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 795c3e45bb638b1058118c99f65db4e6f84244a2af7acbb4d6bd09a19b94dca6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testpentesting123xyz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36685d552523fa8f2d9de645b437d7cecf143d10232afb786da7ff9d224afc2a The OpenSSF Package Analysis project identified 'testpentesting123xyz' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

Malicious code in pinyin-pra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b8720c87d902e268ccf6e9db13f00285998cf35b280a6851ef9c3c23b3f0d6b The OpenSSF Package Analysis project identified 'pinyin-pra' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in by-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe17032deb287c69fb57c7e240590cb829a046c49e904b65d01686694636d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1332 Malicious code in uidm-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46d06a0532602d59ada5b5296d3344ff79c9be233ff036127aad80ba624e6e95 The OpenSSF Package Analysis project identified 'uidm-react-lib' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1158 Malicious code in u-workflow.module.common.hour-of-week (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa993331c82ce09532f10dfb1eb3586e1a3343188c93733712aad7f47cb49539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-commandv14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 126e742ca73d1c4cdf2ec98e46c96cef6f7c92d341e8c71305b73c0fcfdb69e9 The OpenSSF Package Analysis project identified 'discord.js-commandv14' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @ssr-frontend/packages-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17a895de36109204be95b9aba4154cc6414897889ce21aed3bfa4f0a304b3453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-60 Malicious code in @neogov/linkanx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 133eddd55383f57d0ee29c0a3eb7343b9118e95d6c54ab71bb75aa457dd5d2d0 The OpenSSF Package Analysis project identified '@neogov/linkanx' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8686 Malicious code in rechtspraak.insolventies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e0d29af84c44aed4e022517fdf4ddc15b112789794ec5460c0e9acb30bd90c6 The OpenSSF Package Analysis project identified 'rechtspraak.insolventies' @ 0.9.0 npm as malicious. It is considered malicious because: - The...

Malicious code in bingoblitz-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca05a909d0e70b609e4b0b342b303f09e7585d6ff3c890081fb66e42f504db72 The OpenSSF Package Analysis project identified 'bingoblitz-frontend' @ 1.999.0 npm as malicious. It is considered malicious because: - The...