MAL-2024-10670 Malicious code in hubot-hangouts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a411a5e1860f7c3e70679f26150c8bc5300c4e1545d0b6e53e9794171a5529a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10654 Malicious code in themes-nunjucks-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 06e52365ba2a31a6a5b42155ec0c00fcfe7567016e44255acd479ed14c87ddd4 The OpenSSF Package Analysis project identified 'themes-nunjucks-service' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-10652 Malicious code in @ps-i18/i18-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 262dc184a4159c2a1a26d9f3316074336c0ab00d4fae7ce82864cb736106ecb2 The OpenSSF Package Analysis project identified '@ps-i18/i18-utils' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10666 Malicious code in export-pruner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 86e2f312ed9fbfa3af3855f0f17ba52946628c78e0176ec0f9c5a7ed8f2ce8ed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10631 Malicious code in hackerone000001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8afd5e171e8a45a3d333e0d64cf1376ee51009fa4b030aaecd0437111bc57b10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-unusedvar-fix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c2a5ddb66be17d69ec5984d63784684b3865c8a316f79aef7f59107336182947 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-plugin-cognitive-complexity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a22d9cacdbec9aeec6abcf59091621abc9b7b7a01842cc8aa6b86418c062417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bytes-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52ffd94abfbfd2f2e971d55c6e01e3fa3ef3fa60ecd7d609df30f438fccd6bec The OpenSSF Package Analysis project identified 'bytes-guide' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10599 Malicious code in bytes-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52ffd94abfbfd2f2e971d55c6e01e3fa3ef3fa60ecd7d609df30f438fccd6bec The OpenSSF Package Analysis project identified 'bytes-guide' @ 99.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10601 Malicious code in magic-porta1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 99c7a2e9e880fc3afb6fece163e5b896d033d90de3b65042398153594ffd3cea The OpenSSF Package Analysis project identified 'magic-porta1' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10590 Malicious code in a11-cloud (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 830a0f8d860411ad1f0a8802b96a54b0a02d75846fb60427a005ffd77c1ef84a The OpenSSF Package Analysis project identified 'a11-cloud' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10656 Malicious code in eslint-plugin-add-display-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8efa7275ffd4613db923c31dba516fc3434fb3fecb4ccfbd1e1cb929399a6b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10584 Malicious code in yarn2nix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 926aa0eee20951e4172e721ccd2f312b8bf8b7f4618dd28b4f54cde9acdc76d8 The OpenSSF Package Analysis project identified 'yarn2nix' @ 1.3.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10577 Malicious code in @devlovedz/react-native-camera-kit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 724956d5e6ddbc30c35608c68d7472fa0048ac56d9b14ce49222f18a4287d39f The OpenSSF Package Analysis project identified '@devlovedz/react-native-camera-kit-example' @ 0.1.0 npm as malicious. It is considered maliciou...

MAL-2024-10574 Malicious code in arkoselabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b2091fae4c54db03b3115cf52717160432074803439f716332ff9c35482ba7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10555 Malicious code in careers-job-detail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16052b4d2e03953110406185695adc84ab3af8481eb5790e4b4c0f1421bc1b9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10547 Malicious code in @vkplay/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fae653de9f00dc321cbd5b08a89f89b71c2dd6fc14dc214b2eaeb5cbf298c35 The OpenSSF Package Analysis project identified '@vkplay/shared' @ 10.10.15 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10544 Malicious code in refocus-real-time (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45da1f201ce53b0693ee1d8b969dfdcccc0ee919a86acf9efb6583538c7f6c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10552 Malicious code in airpay-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c58278d1a1134ca2368bd39a9425c1d5137f218539dfe6f346931927bc6e9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10542 Malicious code in akita-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551f04343832933628b5f36ec11b0f08219b6ad2c16bdc366b56ce2977b5f721 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...