2449 matches found
Malicious code in frontend-datatable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c7c2e13212e99fdaaa2039f7c837f80d08d0a6510e315a3db617cf16f49b477 The OpenSSF Package Analysis project identified 'frontend-datatable' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sanar-website-v3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5343e64c2316fbb0e3c6256f74b5b0da7993903262ed71f836a93f2e929ced78 The OpenSSF Package Analysis project identified 'sanar-website-v3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1387 Malicious code in sanar-website-v3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5343e64c2316fbb0e3c6256f74b5b0da7993903262ed71f836a93f2e929ced78 The OpenSSF Package Analysis project identified 'sanar-website-v3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in taxes-experience-malicious (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d0561362b41aad8ee7445a9593b1fb0355f25ca65142bb2a491bffd7706960b The OpenSSF Package Analysis project identified 'taxes-experience-malicious' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-1382 Malicious code in cst-web-chat (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f29459986483506a5bda069545676e4bfc990a37afd3dc286ba0e882cc4c8442 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1357 Malicious code in by-fetch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bbe17032deb287c69fb57c7e240590cb829a046c49e904b65d01686694636d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in dependency_confusion123 (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4d13afb7306711deba7679787e9c867a3285ab9deabbf0d1efcf452427cd004 The OpenSSF Package Analysis project identified 'dependencyconfusion123' @ 9.9.9 rubygems as malicious. It is considered malicious because: - Th...
MAL-2024-1341 Malicious code in dependency_confusion123 (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d4d13afb7306711deba7679787e9c867a3285ab9deabbf0d1efcf452427cd004 The OpenSSF Package Analysis project identified 'dependencyconfusion123' @ 9.9.9 rubygems as malicious. It is considered malicious because: - Th...
MAL-2024-1333 Malicious code in threadxpools (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 41a0be6e9aa8db3965bae9f646d47ad6cb85ac9600c8bd71358409062b8fe105 The OpenSSF Package Analysis project identified 'threadxpools' @ 1.2 pypi as malicious. It is considered malicious because: - The package...
MAL-2024-1326 Malicious code in zxcvbnmmmmmmkjhgfdssss (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 797a32227a3c6463b13a67587fb062475a2c075704abc5a3343160c099599244 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1330 Malicious code in elk-uikit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaece47ca73a2646b0cb728b7816026ec3135f48e18054950dce89f8bf9073b0 The OpenSSF Package Analysis project identified 'elk-uikit' @ 99.99.1 npm as malicious. It is considered malicious because: - The package execut...
Malicious code in epc-primer-ui-tags (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cfb923577e57629ff06e092f23f6da4b29067756b213c6e923154649d8f93aca The OpenSSF Package Analysis project identified 'epc-primer-ui-tags' @ 66.6.9 npm as malicious. It is considered malicious because: - The packag...
MAL-2024-1313 Malicious code in not-exist-lykos-poc2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9fdf307a333300d88cdb5031c5f135a2fe51e2a01d4db763c2d1457111ce9fe4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc2' @ 66.6.9 npm as malicious. It is considered malicious because: - The...
MAL-2024-1312 Malicious code in actions-next-bundle-analyzer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a738c63046c2bd1588c1bcc21eafd03d28a480f73643ea8b429ff5fa00da78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in discord.js-hex (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 015a5d02bee306302c82f2de4541e008c6ebcc61804819bf894aac181a1c9eac The OpenSSF Package Analysis project identified 'discord.js-hex' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1274 Malicious code in ui-common-components-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...
MAL-2024-1273 Malicious code in metrics-balancer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4d7b54aa00bce85364eddf568913642023e355ba669803fa01e20a143e93a47 The OpenSSF Package Analysis project identified 'metrics-balancer' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1275 Malicious code in @portal-packages/utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 543a89535f49dbd2c40707219fba6c80040d752e90ba3347abf1d61e9ea0e477 The OpenSSF Package Analysis project identified '@portal-packages/utils' @ 3.0.99 npm as malicious. It is considered malicious because: - The...
MAL-2024-1272 Malicious code in @portal-packages/core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48accd040235db7bd6be1bcdc1f268ed9f438c3d3029090ee357139bbe870759 The OpenSSF Package Analysis project identified '@portal-packages/core' @ 15.105.105 npm as malicious. It is considered malicious because: - The...
MAL-2024-1267 Malicious code in commitlint-config-ifood (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82ce80367972231229038d234d1114c39f459b1c4bfe4a03392a3cfa35d4454b The OpenSSF Package Analysis project identified 'commitlint-config-ifood' @ 1.95.102 npm as malicious. It is considered malicious because: - The...