Malicious code in ori-gabriel-test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97118bb098b3b51630483b77d70977a582c54e3768ff5c54a65435870b3840de The OpenSSF Package Analysis project identified 'ori-gabriel-test2' @ 7.7.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8835 Malicious code in skibo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2926d03211dc44468a65561ad4c8faa1e35ea81bbff5dcfb9bd4a918bd603384 The OpenSSF Package Analysis project identified 'skibo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in iojds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c829100704731a4406f783062c0ccf13e42c91dcf3284731aa1d272a93fe8d0f The OpenSSF Package Analysis project identified 'iojds' @ 9.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2025-4666 Malicious code in proto-google-cloud-dlp-v2beta1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d21bb408ed0e178e23e5b4face7188968fd711ea7ceab009b9d04e6a508740d Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-5239 Malicious code in youreallydontwantthispackage2132 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 594e65e2115609e28b51abcb8b97695199a1eda6a4b72b2513bef87f5a74a211 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2024-9446 Malicious code in flag-leak-r (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 88c1df06a02daf1a911f895df0bd495b0f0d2e72f3b9ad45fe5a837575379c9e Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2024-8819 Malicious code in 0g-storage-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189712c4a0b96b9447f3a3e68e5883de6303d027035935681f2341e68eeccc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8737 Malicious code in @maas-tools/module-federations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e9c4333709afd9ae69fb0ff8f280d123046790364d12ab0a22192bd1339bfff The OpenSSF Package Analysis project identified '@maas-tools/module-federations' @ 3.0.11 npm as malicious. It is considered malicious because: ...

Malicious code in @maas-tools/module-federations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e9c4333709afd9ae69fb0ff8f280d123046790364d12ab0a22192bd1339bfff The OpenSSF Package Analysis project identified '@maas-tools/module-federations' @ 3.0.11 npm as malicious. It is considered malicious because: ...

Malicious code in @maas-themes/eslint-config-react-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 76dd3e73ed32149194358782c120547fddea51353f2ed5f56384a8ff2f0e828c The OpenSSF Package Analysis project identified '@maas-themes/eslint-config-react-typescript' @ 3.1.4 npm as malicious. It is considered malicio...

MAL-2024-8734 Malicious code in @maas-themes/eslint-config-react-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 76dd3e73ed32149194358782c120547fddea51353f2ed5f56384a8ff2f0e828c The OpenSSF Package Analysis project identified '@maas-themes/eslint-config-react-typescript' @ 3.1.4 npm as malicious. It is considered malicio...

MAL-2024-8733 Malicious code in @maas-themes/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4481efc3fc653e0e4e03b7769498d8a50b20b1df2d61d153c2b48818711b789d The OpenSSF Package Analysis project identified '@maas-themes/config' @ 0.2.3 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-8736 Malicious code in @maas-tools/keycloak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e82958168e113d6a4eb9f979c301d52f5df0373ce692f3db35969310bf10af5 The OpenSSF Package Analysis project identified '@maas-tools/keycloak' @ 2.1.5 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @maas-tools/nested-browser-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6c3a06451f8c94f543e39c01595521037c5dba7f8873e64db843e17be7bb8b1 The OpenSSF Package Analysis project identified '@maas-tools/nested-browser-router' @ 2.0.1 npm as malicious. It is considered malicious because...

Malicious code in @ep-mobile/icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8898d3fb5c1fead4de584f7a8099d3df0886074a50f328df051524976dda9be2 The OpenSSF Package Analysis project identified '@ep-mobile/icons' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

Malicious code in soultracker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f60b37d84566711ce6977710fcb74c3358a2c95655c8e115dbb863f67ff4009 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2025-1514 Malicious code in ninjainjtest1337 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53b486443b3f2ffe278aa364b7455c2a522fbf1a514d4c8f70474974bf2be009 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-8019 Malicious code in cargo-hub-ui-api-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8014 Malicious code in @live-backstage/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 59a85f5255ffeaed2480c5affaf5967984d6b21631800dee033bd1c44c762ce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8015 Malicious code in @pgc-web/web-creation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f11af2d4c8f1b00ebbe2e5696eb733dcfb1faaa557d7ec09fb0a61d23d279a55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...