2449 matches found
MAL-2024-9037 Malicious code in espace-membre (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b15612a701319c442ed796295c30f8613359c1e11fad94655184bdf089bbc9c The OpenSSF Package Analysis project identified 'espace-membre' @ 0.3.3 npm as malicious. It is considered malicious because: - The package...
Malicious code in @kp-admin/history (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9291332b4f8b2a62e28230207b0b18e9e9f5e162e170870f684b14a27ea74f34 The OpenSSF Package Analysis project identified '@kp-admin/history' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9036 Malicious code in @kp-admin/history (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9291332b4f8b2a62e28230207b0b18e9e9f5e162e170870f684b14a27ea74f34 The OpenSSF Package Analysis project identified '@kp-admin/history' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9035 Malicious code in @gintel/personal-assistant (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceacaddd98b873d32e3e6aa49bd9d48f964eca12ffe724a93abeee1ca81004db The OpenSSF Package Analysis project identified '@gintel/personal-assistant' @ 0.180.0 npm as malicious. It is considered malicious because: - T...
MAL-2024-9031 Malicious code in c2-object-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1470f00dfffc6e734913635819fbb158d4a5b044a9bcfddab4891b631dcb8000 The OpenSSF Package Analysis project identified 'c2-object-storage' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9030 Malicious code in intercom-openapi (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eb4800eebfbaf5b4769f3ed6e0cdff3b37e8f0ce5c2f08b9b57dfa6fea62394 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9029 Malicious code in nuvei-commercetools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 841be1dc2418006e102dcc464f2f6219e3745c922315979f19e9524f54693c2d The OpenSSF Package Analysis project identified 'nuvei-commercetools' @ 1.5.0 npm as malicious. It is considered malicious because: - The packag...
Malicious code in repo-private (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 475962f34cf11b2eb56bc65cbb239a83bb17063ca8bb9b0f03d295a5b88e4b6a The OpenSSF Package Analysis project identified 'repo-private' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9024 Malicious code in @plentyofcode/reef (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b990437e587fd2474b5000fd9f707f0e84e18f3c7dcea47121c3c8e8d28c2316 The OpenSSF Package Analysis project identified '@plentyofcode/reef' @ 1.1.263 npm as malicious. It is considered malicious because: - The packa...
Malicious code in algolia-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e9938b498a630cfc9745cf7083809d4bc8477a92664b7f56c0b41b82f0d30e4 The OpenSSF Package Analysis project identified 'algolia-analyzer' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9018 Malicious code in world-id-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93838b8762b5668a88f866aca84e841a297e171d9f8f0e9258e2a9e99917d8ed The OpenSSF Package Analysis project identified 'world-id-docs' @ 10.10.10 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9016 Malicious code in dijit-legacy-requires (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06fdd8c387dfcf670dfd30cda0d3ab45817d6fcaa9120a45c08410a0f479b117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in apollo-client-error-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe552e4b70220e1bb21d16486e988a993baf13fe78babd1d269cea3a7a765954 The OpenSSF Package Analysis project identified 'apollo-client-error-template' @ 2.0.0 npm as malicious. It is considered malicious because: - T...
MAL-2024-9008 Malicious code in apollo-client-error-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe552e4b70220e1bb21d16486e988a993baf13fe78babd1d269cea3a7a765954 The OpenSSF Package Analysis project identified 'apollo-client-error-template' @ 2.0.0 npm as malicious. It is considered malicious because: - T...
MAL-2024-9000 Malicious code in whatnot_seller_api_docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bd5f2c9e95b729435440515ed96f944e44f9be9e7843d90090aeef7a7a0716d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8997 Malicious code in neuron-viewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39e11d5c0e9f49ca7c1e136d6f73f692162e1873d0def4a3135bd3dacbdd9ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8998 Malicious code in node-jaws (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09ca3d019ce0bb16989d59940c968d7fa19e830fdefee7ada26b2ee515b9b177 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in node-jaws (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09ca3d019ce0bb16989d59940c968d7fa19e830fdefee7ada26b2ee515b9b177 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @mallutrojan005/coveralls (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d735ee63af3d7bfaf8e5af37b0bd6a8034f4283ad069c65241a1c3f6c8ea7100 The OpenSSF Package Analysis project identified '@mallutrojan005/coveralls' @ 2.1.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-8994 Malicious code in assistants-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49dcd943b6b43273aa613aed19e623aa2ae67153ce323248811b64b441f38364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...