MAL-2024-10577 Malicious code in @devlovedz/react-native-camera-kit-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 724956d5e6ddbc30c35608c68d7472fa0048ac56d9b14ce49222f18a4287d39f The OpenSSF Package Analysis project identified '@devlovedz/react-native-camera-kit-example' @ 0.1.0 npm as malicious. It is considered maliciou...

MAL-2024-10574 Malicious code in arkoselabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16b2091fae4c54db03b3115cf52717160432074803439f716332ff9c35482ba7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10555 Malicious code in careers-job-detail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16052b4d2e03953110406185695adc84ab3af8481eb5790e4b4c0f1421bc1b9f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10547 Malicious code in @vkplay/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fae653de9f00dc321cbd5b08a89f89b71c2dd6fc14dc214b2eaeb5cbf298c35 The OpenSSF Package Analysis project identified '@vkplay/shared' @ 10.10.15 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10544 Malicious code in refocus-real-time (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 45da1f201ce53b0693ee1d8b969dfdcccc0ee919a86acf9efb6583538c7f6c47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10552 Malicious code in airpay-js-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c58278d1a1134ca2368bd39a9425c1d5137f218539dfe6f346931927bc6e9a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10542 Malicious code in akita-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 551f04343832933628b5f36ec11b0f08219b6ad2c16bdc366b56ce2977b5f721 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10565 Malicious code in paysafe-ia-v1-portal-backoffice-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d850f2bbe367e21f3680c1838be9099246287331edec3c167b8af3fd5bba350f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10563 Malicious code in nfs-server-alpine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d66c21af0a19ac1a2dafd01239a6a61a590bdc133e53a71bd9527b2a2708d7b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10561 Malicious code in koho-charity-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c05a6b955dc437e0c2b04e5972bf13ca55b00a97a48fe3d7cf1fa40a2f7b3abf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10535 Malicious code in deriv-app-id-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c03deb9ccf8f604f4e3ba191f6d8c2e3f94cc273950f13aafde768a468f13071 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10566 Malicious code in pixiv-novel-editor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ab4e5119a339b3970c17507784181c47d0872a8f642804a5d5a1bd4182e381e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xcasset-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55e5f7e5d499d4113f36ddf1be5df2ac0a49176ca22b7b86e106077f936801fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10559 Malicious code in embrace-helloworld (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27c1c70726566294b9958ec5ab9d3af0e2d5e1c3dc9451f07055c6b650bfbd50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10553 Malicious code in autolink-jira-issue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d899824dec6a9efaddf4482f495ca1b557fc0ec18d4371e0214c6397fd95ee71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10571 Malicious code in testing-logger-bush1do-c0de (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc1bbb3c397a2084cc727cb2602f294e9b5cd961d43cb28aab6ea576176edf41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xgplay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc40998dbfce7312db293c7404a1a116ea529846512149b891592e0920049e35 The OpenSSF Package Analysis project identified 'xgplay' @ 89.3.5 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-10469 Malicious code in daumu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d37e522b955b76b0e14a598bb86fa4057377c13ddfc51a8741a10957281602c8 The OpenSSF Package Analysis project identified 'daumu' @ 89.3.5 npm as malicious. It is considered malicious because: - The package communicate...

Malicious code in xgplayre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c92188f0f7a497175f8ee0edc3d1ba5a6fbef5fb82b9205d9ff0e7c03408ee5f The OpenSSF Package Analysis project identified 'xgplayre' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

Malicious code in @bytedanc-ad/mui-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91a2d4c3edc0b12c58d88c7087781cde9cc59dd64bad30da86b31a489fdc2753 The OpenSSF Package Analysis project identified '@bytedanc-ad/mui-vue3' @ 89.3.5 npm as malicious. It is considered malicious because: - The...