MAL-2024-8924 Malicious code in randompackage-notreal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f9c2160c65a4352d89013d032c20e0f4cf59a5f34ca2f96baf3aeeca5858a7b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8922 Malicious code in vehicle-optionalproducts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52513e322c63383065f4e0e5b8b22dbb1452248d372c74fd463402c7179e5abb The OpenSSF Package Analysis project identified 'vehicle-optionalproducts-ui' @ 99.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in @energysolutions/mylib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08f12d3c3e2e99f5bcec121d93fe4ece6a29ff57478e2e93e0cff0d4309832ac The OpenSSF Package Analysis project identified '@energysolutions/mylib' @ 999999999.999999.999999 npm as malicious. It is considered malicious...

Malicious code in npm-evil-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5422630a80e283b7ae938687b04a988bee70b5c8b137520d4aaca5af1b979c3 The OpenSSF Package Analysis project identified 'npm-evil-fish' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8912 Malicious code in infosnap-secure-family-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26fd78e593cb831595d3ef036383a3570e155771197138cd43afac672bfe304 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8941 Malicious code in confidential-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22b6e399f6684509440f29b16a20c593cc1aee7a15e87f5263dfe847b6d7850a The OpenSSF Package Analysis project identified 'confidential-package-name' @ 99.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-8911 Malicious code in dc-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5534b8254822e7e5f6e4ee2e6f748422783f8a2aebac5f16fca13c06af524468 The OpenSSF Package Analysis project identified 'dc-testing' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bsc-stdlib-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df99335a79394c76ec65c4c11bd937510961ba93b67e631d560753ab61a735b6 The OpenSSF Package Analysis project identified 'bsc-stdlib-polyfill' @ 0.0.1 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-8900 Malicious code in bsc-stdlib-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df99335a79394c76ec65c4c11bd937510961ba93b67e631d560753ab61a735b6 The OpenSSF Package Analysis project identified 'bsc-stdlib-polyfill' @ 0.0.1 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-8876 Malicious code in testing_coll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8518731ff24bfebf9747d6cf7d3a365c7061fe94c0bcc413a194915890f31f75 The OpenSSF Package Analysis project identified 'testingcoll' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8875 Malicious code in rust-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879e91954c530c7fda9e73575ef2f4a945be9a29a5761866d4a4470b32469ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in events_pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd8e0d60317b9c1b711d6f1dcbf88073cf135c6a018bc578641d68f8bddb270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8874 Malicious code in events_pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8dd8e0d60317b9c1b711d6f1dcbf88073cf135c6a018bc578641d68f8bddb270 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in priv-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis baeb04b7baba552327c5781a2a0bde2c82381f0d43ed7c4d84c48eb0b7c22fa7 The OpenSSF Package Analysis project identified 'priv-pack' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in roblox-badges (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 631332631f47abd7acead3d283e6d06c693fe8e56c3f235bb0855b8fce3fe8a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8853 Malicious code in roblox-event-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6f08f30c6d48fad2d39e96f192eb0efb0ae97511a98d6ef6b3048b20486f7c30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8850 Malicious code in azure-iothub-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - Th...

MAL-2024-8848 Malicious code in balvant-chavda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a4352948540614eef450d227df439f2f1c0d1da030df382e59831548767f473 The OpenSSF Package Analysis project identified 'balvant-chavda' @ 1.8.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10225 Malicious code in mobileye-8-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7b3a006f16102113625364a266a513016fe138d66a4008fc548e6df97c1a9a8 The OpenSSF Package Analysis project identified 'mobileye-8-connect' @ 7.7.8 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10226 Malicious code in ori-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b71bf5ca700406e224508f08266da2a443693d48eb216c3854de6be0d1451346 The OpenSSF Package Analysis project identified 'ori-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package executes o...