2449 matches found
Malicious code in @ssr-frontend/packages-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17a895de36109204be95b9aba4154cc6414897889ce21aed3bfa4f0a304b3453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-971 Malicious code in jera (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb23042fd58a78e938674a631ab67c9e3f5df50007c0ae2088da7c6da59e9805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-970 Malicious code in discord.js-commandsv14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0552b95113f728a401629d22107eae7aa9479e0632b876f49e2558af8784f665 The OpenSSF Package Analysis project identified 'discord.js-commandsv14' @ 1.0.4 npm as malicious. It is considered malicious because: - The...
MAL-2024-957 Malicious code in ccl-modal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39e730f4f56209fb93dff1d5b08b4aef3031c600f8402df5d61b00e9f19a41e0 The OpenSSF Package Analysis project identified 'ccl-modal' @ 2.3.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-947 Malicious code in moblig-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a9601f46c6924bb210289c184590485d4dabf6696dc6c0da5720465002bcf06 The OpenSSF Package Analysis project identified 'moblig-npm' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...
MAL-2024-920 Malicious code in npm_package_dependencies_linkify_it (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 540ac82200adeadb0c42901b9214e03c897e79ee20de2be6a87beb66e45393f6 The OpenSSF Package Analysis project identified 'npmpackagedependencieslinkifyit' @ 4.0.1 npm as malicious. It is considered malicious because: ...
MAL-2024-922 Malicious code in npm_package_dependencies_regenerator_runtime (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 05bb5172a89127b62735543db40dbdde8cccd567e7bcc8fcb2f633b660376ec6 The OpenSSF Package Analysis project identified 'npmpackagedependenciesregeneratorruntime' @ 0.15.0 npm as malicious. It is considered malicious...
Malicious code in pushpress (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12aee1451d6c71b0a5a70e5022a0911c2c2ba4d006a2ccb4af151daca6df1c2d The OpenSSF Package Analysis project identified 'pushpress' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-917 Malicious code in pushpress (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12aee1451d6c71b0a5a70e5022a0911c2c2ba4d006a2ccb4af151daca6df1c2d The OpenSSF Package Analysis project identified 'pushpress' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-925 Malicious code in browser-spoof (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 163b0aa2d0d3439a25800f6f383fbe268a69753591f918b10475d357d4e4a533 The OpenSSF Package Analysis project identified 'browser-spoof' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in cagov-template-development (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 618cc8a0ff5658fdddb6296278644b3e69634530941e19fd1b9985c757df7888 The OpenSSF Package Analysis project identified 'cagov-template-development' @ 9.2.1 npm as malicious. It is considered malicious because: - The...
Malicious code in california-state-web-template-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91a0432190eb409c84a7c6bf3c06b34d9b7c4571be93f31b3635a925f4a4099e The OpenSSF Package Analysis project identified 'california-state-web-template-react' @ 9.2.1 npm as malicious. It is considered malicious...
MAL-2024-150 Malicious code in orchidnet-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0dd6961cefb46152dbb4b21adeb369408e08c40551592284dd3789c650000d08 The OpenSSF Package Analysis project identified 'orchidnet-web' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in genealogy-angular (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c79ec06571b4db3810fc4f4e1dc9aec99929ab8e3a35f853e5f253f55adce823 The OpenSSF Package Analysis project identified 'genealogy-angular' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-147 Malicious code in sample-schema-mgmt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c4ef77c3bb30fb8fc7dc5c8e999eb9187db74dca1d1a5dc38068c32b54ae508b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in froxlor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 445e6f97a516e090b04dc5969fbc1472e2c740461dec0b7769bbe76e5d3b6326 The OpenSSF Package Analysis project identified 'froxlor' @ 19.0.4 npm as malicious. It is considered malicious because: - The package...
MAL-2024-136 Malicious code in librct (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f5f02ff35835e34a22c3e1381a0888b755d52334e14e61160dff3b9ec4e08b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-135 Malicious code in siif_components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2304aeb0d32868f4f2b4f1b3cc9c6fe5d8109d9a14029cbaab0d947287e9686f The OpenSSF Package Analysis project identified 'siifcomponents' @ 7.0.5 npm as malicious. It is considered malicious because: - The package...
MAL-2024-132 Malicious code in storefront_h5_sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7c0d65d6fdf4ca9a7677bce242a39f89c488703b532de05acb574c7baa799e3 The OpenSSF Package Analysis project identified 'storefronth5sdk' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-131 Malicious code in pd-ui-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b46ebcb2f76102916a1ab764b5af360b8c6cdd1dc56a269538132bcc4e307983 The OpenSSF Package Analysis project identified 'pd-ui-kit' @ 1.5.1 npm as malicious. It is considered malicious because: - The package...