Malicious code in amhairc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13d3cfae40288462dfd8b822c93d41e65a99b5d16d94e0c3ba536eaf9b5ee0bd The OpenSSF Package Analysis project identified 'amhairc-web' @ 6.0.0 npm as malicious. It is considered malicious because: - The package execut...

MAL-2023-8163 Malicious code in symphony-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1360bb9cfdd8afaf47d9444561048cc1f780fc6dd830a6d709320dc260bf7476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8103 Malicious code in sharinj-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c38a5716c52678eb97b3b338a62f683268c28460657955b8ef607ef45c57a8cf The OpenSSF Package Analysis project identified 'sharinj-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7979 Malicious code in visual_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7289e2b3846c5d4eacbe709a4bd08a2e48688e587b810b9535c2275275dd2497 The OpenSSF Package Analysis project identified 'visualcomponents' @ 1.0.13 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8051 Malicious code in jupiter-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a995253a2ee90fffb109184b329a5e1966f4e8b6cd8a67c131c60324495d8127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7956 Malicious code in sb_chatbot_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 962d49e68e611a6b10b1a3d716d60661cabfa0b0b8d76f43ba0e489e5c20f581 The OpenSSF Package Analysis project identified 'sbchatbotui' @ 11.11.11 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1562 Malicious code in file-format-series-json-to-sketch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8508035009e823eff2a635014b28a526f6a2ed3a3132c185b572bb5cd26095ce The OpenSSF Package Analysis project identified 'file-format-series-json-to-sketch' @ 99.99.0 npm as malicious. It is considered malicious...

MAL-2023-1492 Malicious code in github-deployment-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbecfc86b0734310a1e38d002a298fffa75da0631b0309309bd26ad98188e97a The OpenSSF Package Analysis project identified 'github-deployment-action' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in github-deployment-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbecfc86b0734310a1e38d002a298fffa75da0631b0309309bd26ad98188e97a The OpenSSF Package Analysis project identified 'github-deployment-action' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1490 Malicious code in bugsnotfound (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3980d08da6629463ad50e50b6a94591add7f48be24c1256a14e6d3e56fe69f55 The OpenSSF Package Analysis project identified 'bugsnotfound' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1435 Malicious code in notsogood (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b089f6e53ae82855fbdcf8b69573b5835bdc0ca9a476056a3fb78f1e85c2a50c The OpenSSF Package Analysis project identified 'notsogood' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1092 Malicious code in @n9xcnr5test/n9xcnr5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98235bbf40ea66c28973775cba8ead37bb4dc1d8999e5ebf02eb3157d4ba74be The OpenSSF Package Analysis project identified '@n9xcnr5test/n9xcnr5' @ 2001.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1188 Malicious code in gp-actions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af07f18bec84cba6878dd345ea1281728e0257d285118a40d835d7c9a2985a6 The OpenSSF Package Analysis project identified 'gp-actions' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1164 Malicious code in dox_assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1c48c355e0ca22767468dec0d14be75c769e6b77c12e7c1a7989c0c6a487287 The OpenSSF Package Analysis project identified 'doxassets' @ 999.99.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1192 Malicious code in grizzly_sql_graph_visualization (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98b80123b8320ae78359836efd59f32caab21e7efffea59f91bfb61b947bbab9 The OpenSSF Package Analysis project identified 'grizzlysqlgraphvisualization' @ 0.2.3 npm as malicious. It is considered malicious because: - T...

Malicious code in wrangler-dev-api-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61404905188d42181fbf3217b2ebffe91c1328a0cd469718a53faec95f244738 The OpenSSF Package Analysis project identified 'wrangler-dev-api-app' @ 24.12.47 npm as malicious. It is considered malicious because: - The...

MAL-2023-1195 Malicious code in hellodependency2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 17de73fdb52a6a236afb53cd11e4bbf4c7ceb88be0eae16c1a16561d102643b8 The OpenSSF Package Analysis project identified 'hellodependency2' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1088 Malicious code in @metronetinc/react-component-library-next-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d29aaa8c56838993a54df9b7ee45362f439f4b704ca467383c14f4643e2151a9 The OpenSSF Package Analysis project identified '@metronetinc/react-component-library-next-plugin' @ 9.999.8 npm as malicious. It is considered...

MAL-2023-1259 Malicious code in openai-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ae52243725fa671be1294e1a3747581764b2e74d9c499e0ac249b03676d0dbf The OpenSSF Package Analysis project identified 'openai-beta' @ 99.99.999 npm as malicious. It is considered malicious because: - The package...