Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

MAL-2024-9067 Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

MAL-2024-9057 Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9065 Malicious code in axp-product-ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5285fb9646b0435fb4ae3204b5975277243e149fc95c187c5c65e2fa0609389e The OpenSSF Package Analysis project identified 'axp-product-ducks' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9045 Malicious code in evolve-base-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909d9bfde96cc057e1103d65d9b672ee44b67faf28bb4f4fb8fcbfd7877903d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hakka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1baf872685dd4243ab821d1f37c342f5af09558faf5e9bc83e1fd16505802029 The OpenSSF Package Analysis project identified 'hakka' @ 2.1.2 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-9038 Malicious code in @plentyofcode/header-bidding-adslot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af5eb7081dde9d70a0712995098c35c53b72258056714c3dbefd6a3d194d6ed3 The OpenSSF Package Analysis project identified '@plentyofcode/header-bidding-adslot' @ 2.0.36 npm as malicious. It is considered malicious...

MAL-2024-9037 Malicious code in espace-membre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b15612a701319c442ed796295c30f8613359c1e11fad94655184bdf089bbc9c The OpenSSF Package Analysis project identified 'espace-membre' @ 0.3.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in @kp-admin/history (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9291332b4f8b2a62e28230207b0b18e9e9f5e162e170870f684b14a27ea74f34 The OpenSSF Package Analysis project identified '@kp-admin/history' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9036 Malicious code in @kp-admin/history (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9291332b4f8b2a62e28230207b0b18e9e9f5e162e170870f684b14a27ea74f34 The OpenSSF Package Analysis project identified '@kp-admin/history' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9035 Malicious code in @gintel/personal-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceacaddd98b873d32e3e6aa49bd9d48f964eca12ffe724a93abeee1ca81004db The OpenSSF Package Analysis project identified '@gintel/personal-assistant' @ 0.180.0 npm as malicious. It is considered malicious because: - T...

MAL-2024-9031 Malicious code in c2-object-storage (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1470f00dfffc6e734913635819fbb158d4a5b044a9bcfddab4891b631dcb8000 The OpenSSF Package Analysis project identified 'c2-object-storage' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9030 Malicious code in intercom-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eb4800eebfbaf5b4769f3ed6e0cdff3b37e8f0ce5c2f08b9b57dfa6fea62394 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9029 Malicious code in nuvei-commercetools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 841be1dc2418006e102dcc464f2f6219e3745c922315979f19e9524f54693c2d The OpenSSF Package Analysis project identified 'nuvei-commercetools' @ 1.5.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in repo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 475962f34cf11b2eb56bc65cbb239a83bb17063ca8bb9b0f03d295a5b88e4b6a The OpenSSF Package Analysis project identified 'repo-private' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9024 Malicious code in @plentyofcode/reef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b990437e587fd2474b5000fd9f707f0e84e18f3c7dcea47121c3c8e8d28c2316 The OpenSSF Package Analysis project identified '@plentyofcode/reef' @ 1.1.263 npm as malicious. It is considered malicious because: - The packa...

Malicious code in algolia-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e9938b498a630cfc9745cf7083809d4bc8477a92664b7f56c0b41b82f0d30e4 The OpenSSF Package Analysis project identified 'algolia-analyzer' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9018 Malicious code in world-id-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93838b8762b5668a88f866aca84e841a297e171d9f8f0e9258e2a9e99917d8ed The OpenSSF Package Analysis project identified 'world-id-docs' @ 10.10.10 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9016 Malicious code in dijit-legacy-requires (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06fdd8c387dfcf670dfd30cda0d3ab45817d6fcaa9120a45c08410a0f479b117 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in apollo-client-error-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe552e4b70220e1bb21d16486e988a993baf13fe78babd1d269cea3a7a765954 The OpenSSF Package Analysis project identified 'apollo-client-error-template' @ 2.0.0 npm as malicious. It is considered malicious because: - T...