MAL-2024-9412 Malicious code in gerhtregefddfsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d49d2d7b46e404479e7049fd4c8e6990656fc1c00d07a94799a9d42b8213b138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9405 Malicious code in module-with-prebuild (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82d63a2684b4dce89fe62dddc35e9699b9a3473378f32fc8c13c1a1bdead8b02 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9404 Malicious code in direct_access_theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e064b0aa00efc879c6095cc571b4d1359ef3cd9c13e1f02b5497c78d364fabef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b948e846f1817c6c72336ef38aac1149d25e0e40dc903eef60f7af4f3625e1f According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

MAL-2024-9408 Malicious code in j5gerggnpuiwerbngpiutbgn0iutb0p (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b948e846f1817c6c72336ef38aac1149d25e0e40dc903eef60f7af4f3625e1f According to the description, packages should demonstrate the dependency confusion attack. The realisation is, in fact, a spamming with packages having as the...

Malicious code in spectrum-css-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9fd11f8bce16c648d0357bfe32e3f5597413551bc0eb8884eee63ac92eaa9569 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nuxtjs_axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dc2f94efdf2068b7e7ceb3c7f058d573962b9484300a6d559ff9d7a947f22008 The OpenSSF Package Analysis project identified 'nuxtjsaxios' @ 5.13.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9299 Malicious code in tomorrowland (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0815a68270dcf10f382a198392cb5e265233bc6fd6f8bd3fdaff345b87ce8e11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9297 Malicious code in viajemos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eaa4f7f65afd8ce40ebdcb66c5d40f5a10adf26157fb493c4628b2c5940d843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9288 Malicious code in blank-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6eee7dd629fd54a1f09fdb48256d257595637f6596b2182b38bf01200ec08291 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9284 Malicious code in timeline-airtable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 82972946c40c712d890ca81684f6f8e6cf2215c45c13f10665f22be10ee7f441 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9283 Malicious code in mmpp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19e1d61143b91e405fc0bf1401f3def53b01efefc28bfed53a58995d4dd41153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @client-innovation/librct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2f5c07d4afdd35b9ab57b79e56cc5fb4691cf41b012b5c2dc63c13369a235a The OpenSSF Package Analysis project identified '@client-innovation/librct' @ 100.100.0 npm as malicious. It is considered malicious because: -...

MAL-2024-9290 Malicious code in @client-innovation/librct (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2f5c07d4afdd35b9ab57b79e56cc5fb4691cf41b012b5c2dc63c13369a235a The OpenSSF Package Analysis project identified '@client-innovation/librct' @ 100.100.0 npm as malicious. It is considered malicious because: -...

Malicious code in @copilot-web-widgets/ai-writer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 370d6b958dcc6a556f2ee4be3946c6a1a995bb05d4217f408f2302dd397689a2 The OpenSSF Package Analysis project identified '@copilot-web-widgets/ai-writer' @ 1.13.1 npm as malicious. It is considered malicious because: ...

MAL-2024-9212 Malicious code in @copilot-web-widgets/common-core-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 148c6b43da3f4ec787aa611cf721a390eab6918627604a9405d817955e2c472b The OpenSSF Package Analysis project identified '@copilot-web-widgets/common-core-sdk' @ 1.11.0 npm as malicious. It is considered malicious...

MAL-2024-9110 Malicious code in sd-template-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1d800f01a52aafc7bee8ab45032560696e9e36ca3c902a4adc7d1245294fc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9109 Malicious code in msdhsfhjfj-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 932d9efe887d64209a4ce155d5f224a976b49eb001d725016073b83f2d8b3bcd The OpenSSF Package Analysis project identified 'msdhsfhjfj-cli' @ 9.4.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9106 Malicious code in @fdp-tools/helm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bef4a02ea616732eda209303ce418b0fbf07d43995a8ac48bada7b7967f78819 The OpenSSF Package Analysis project identified '@fdp-tools/helm' @ 0.1.11 npm as malicious. It is considered malicious because: - The package...

Malicious code in @fdp-tools/observability (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3470fe72252929511b982b06c857fe2d4c8030b512a880c9bc15a088be17c838 The OpenSSF Package Analysis project identified '@fdp-tools/observability' @ 1.1.3 npm as malicious. It is considered malicious because: - The...