MAL-2024-10282 Malicious code in ui-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ec8e71cd55c69aa20854cfdc8a408f5591d35551b0d09cfa0bbdd9f148a7401 The OpenSSF Package Analysis project identified 'ui-tooltip' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10243 Malicious code in eslint-plugin-evo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04325a96cfbff0b91342138baf94c31960794bb6b22d270ae933581f0da5df5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10237 Malicious code in oneui.angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bbff39f683b1b6c064ebc065aae50d8fd4123b1b53b7f90bed51db2d19562a6e The OpenSSF Package Analysis project identified 'oneui.angular' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10231 Malicious code in wasabicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffb0fc29ff4926fd2ba01ef1bcfac2bb7f009eca3c1943a131b61b8b2827aa78 The OpenSSF Package Analysis project identified 'wasabicons' @ 98.98.98 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10228 Malicious code in lcnc-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5796a2495979500b8108d1045890ebee60f0d9238a025ee5379ff89260e37285 The OpenSSF Package Analysis project identified 'lcnc-app' @ 3.5.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10227 Malicious code in @woody-mrs-potato/utils-banking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1466f5d4f097f853c6a448bec817a35b2d4173df50bee1404ba4b46433387349 The OpenSSF Package Analysis project identified '@woody-mrs-potato/utils-banking' @ 1.0.5 npm as malicious. It is considered malicious because: ...

MAL-2024-9460 Malicious code in sling-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71488d197d0f61aaf0b4572ea62c47f0735db314374038355cbdf5735e7ca1b1 The OpenSSF Package Analysis project identified 'sling-sdk' @ 9.8.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9454 Malicious code in ohcm-polymerase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ed5d7615b41cea1ded4a590d20e42f353b3a6e43315a2eac25a8c63ab6607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9452 Malicious code in pwn2day-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0511d29fc5da2e5b913f1015e3a397abcd973ec98bffbff3b41a857ba68dab31 The OpenSSF Package Analysis project identified 'pwn2day-shell' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9450 Malicious code in @wf-wfmfe/pxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9fe18a3d9fa1111ff6b8067d5506179c0ddfa8365404a2b5ee147b523086df3 The OpenSSF Package Analysis project identified '@wf-wfmfe/pxp' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in mcroutingservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15262556e3b11cafe3a148da26c5ca6a92e8ad98b01bf2f4c5deb6a26cdda697 The OpenSSF Package Analysis project identified 'mcroutingservice' @ 4.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9442 Malicious code in @ng-cat/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c0268f0af6152271247edc368914f17157c4261598da984de9ee52333993057 The OpenSSF Package Analysis project identified '@ng-cat/common' @ 9.99.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9440 Malicious code in unity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca5747856927b0c97d3b66882120df5fa30a88c49728022ee836563ea39ea4 The OpenSSF Package Analysis project identified 'unity-components' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9439 Malicious code in @ttspc/open_center_qf_detail (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a15a1727f1b14f403e9cffda24e402c7d16d8088d26e3bb7377d2d81ab791a52 The OpenSSF Package Analysis project identified '@ttspc/opencenterqfdetail' @ 100.100.102 npm as malicious. It is considered malicious because: ...

MAL-2024-9437 Malicious code in eslint-config-bc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6df69ef80bd1fa8d92354d60af1310a623bcc81f45747601445f423c670e0545 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9432 Malicious code in atg-superagent-retry-delay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 75f0747e74a5e0a7d519918b8aceef9e8f4f9eaa0ad1854c1954276bb1c5166c The OpenSSF Package Analysis project identified 'atg-superagent-retry-delay' @ 100.100.100 npm as malicious. It is considered malicious because:...

Malicious code in roblox-creator-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c24626261c9a2e163bb8ec1654a1b5afeb68caf4f82285bf05ebefcf94d414e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9430 Malicious code in projetmobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71d8a1d00b53e4f04ce0ad77ebfbbb389dd8a22bc6b9a388f22335cf649501ba The OpenSSF Package Analysis project identified 'projetmobile' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9420 Malicious code in @ciam-expressjs-vanilla-samples/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc28deadcf9235665f79c65d92ca7684f27361c14efa6bcd44ad82b40947b9df The OpenSSF Package Analysis project identified '@ciam-expressjs-vanilla-samples/shared' @ 1.0.1 npm as malicious. It is considered malicious...

MAL-2024-9416 Malicious code in webpack4types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af76ada8574132366108f7556f6e93423bf630af2d9af6406efefc94dc3557ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...