MAL-2023-1373 Malicious code in keras-arg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32a0f3bb37cc11bc53e1eae707f72ba2dea5ea32aa1c3a1a631de2254b9a00de The OpenSSF Package Analysis project identified 'keras-arg' @ 19.14.9 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1371 Malicious code in install-pytest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c354c0f5dc76b96d0db0745a885c308a97e8edfa82d219fda8c353dd567b43d6 The OpenSSF Package Analysis project identified 'install-pytest' @ 1.12.7 pypi as malicious. It is considered malicious because: - The package...

Malicious code in mets-disclosures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c300cd1bdefb340a29adcef2aaf349875956aec72a7156652cf9dfed6bf26c79 The OpenSSF Package Analysis project identified 'mets-disclosures' @ 0.0.227 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1366 Malicious code in guiconsoles (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24a3798623a3f68e4c418540b53aa81d86785aeb5618a02914aa14be4c4311ba The OpenSSF Package Analysis project identified 'guiconsoles' @ 1.0.5 pypi as malicious. It is considered malicious because: - The package...

Malicious code in docs-component-follow-public-pop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee5ed5d036b992d7f499e1931abb9513f56db1572a9ea4d5fc7cc45e2140f5ad The OpenSSF Package Analysis project identified 'docs-component-follow-public-pop' @ 1.0.8 npm as malicious. It is considered malicious because:...

MAL-2023-1160 Malicious code in docs-component-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e4e933240e0533957a39c9132a6925469e069081320949dc198545fd1080a49 The OpenSSF Package Analysis project identified 'docs-component-title' @ 1.2.2 npm as malicious. It is considered malicious because: - The packa...

Malicious code in docs-component-title (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e4e933240e0533957a39c9132a6925469e069081320949dc198545fd1080a49 The OpenSSF Package Analysis project identified 'docs-component-title' @ 1.2.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1156 Malicious code in docs-component-advanced-permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a065d7fc179e436125a277398d58863cc0c5145b5220c893c09409bdd44807d The OpenSSF Package Analysis project identified 'docs-component-advanced-permission' @ 1.1.0 npm as malicious. It is considered malicious becaus...

MAL-2023-1159 Malicious code in docs-component-like (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cde662c7be657edd2cffb28c74114bf428fa1b9db283784ae67f159dbf201ce2 The OpenSSF Package Analysis project identified 'docs-component-like' @ 1.0.6 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1157 Malicious code in docs-component-folder-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 029903e7351485fc54de0e50d6f2f3c9c822895bd8d97930476b5a69f23dd6f9 The OpenSSF Package Analysis project identified 'docs-component-folder-selector' @ 1.0.6 npm as malicious. It is considered malicious because: -...

MAL-2023-1209 Malicious code in index-template-mets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 104f2ff9714322069aa6e619d7050de41349e85f4c3eaa04c4c25ba0e239e8a9 The OpenSSF Package Analysis project identified 'index-template-mets' @ 1.0.1 npm as malicious. It is considered malicious because: - The packag...

Malicious code in nightmaretestingpackage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ecc46cf13068e4ebe6d534e65e7588e04bcafa5de43fa84a3b1ef4de5d79cad The OpenSSF Package Analysis project identified 'nightmaretestingpackage' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-10 Malicious code in security-util-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2309de1524c064d7eba8b0c288762426955241d23e00eaaeca7766758ab9054e The OpenSSF Package Analysis project identified 'security-util-py' @ 0.0.6 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1226 Malicious code in lexicalutils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74435494f223aa6bbba50c2e8e746a27b089ed5df8eabcb948a7bab06cc57e74 The OpenSSF Package Analysis project identified 'lexicalutils' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1427 Malicious code in i18n_sonder (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f0c939067907bb4e3bd0d91530b128f2ffe8c595d619eaa3ab544891de51e2b The OpenSSF Package Analysis project identified 'i18nsonder' @ 4.1.0 rubygems as malicious. It is considered malicious because: - The package...

CVE-2023-32758

giturlparse aka git-url-parse through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS Regular Expression Denial of Service if parsing untrusted URLs. This might be relevant if Semgrep is analyzing an untrusted package for example, to check whether it accesses any Git...

Malicious code in fusion-ng-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a24d384788c5f4810ac97c4f6ab429d9ef27b7dde67f62839ca68e7924695349 The OpenSSF Package Analysis project identified 'fusion-ng-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-167 Malicious code in cfa-styleguide (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5562a6cb1d5f239216be52c28e8d316e8ffe0f490d11978863202a6fcfcbe8bc Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-575 Malicious code in maddy_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx edb288f616afccdf20ab32d24f5f0616b0b2b91bcdb3d8f0d8bd60e1adbe6b0a Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in ikea-jssdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7ee2c27d65f23dc603308d3cb624e657745f399a18181feac7ab7a3d176d931 The OpenSSF Package Analysis project identified 'ikea-jssdk' @ 1.2.1 npm as malicious. It is considered malicious because: - The package...