MAL-2025-4699 Malicious code in cugraph-service-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0246f55913ed7c36615843f23e434366bb7e1491332d526c91700a891ee8fde7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-3600 Malicious code in hello-wordl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 238c137f1939d99c855ef5fedf6f16b67ac8fcd9087d80270475d3eeff8e8c65 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-128 Malicious code in pyqubee (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f966d9bb86511c937bd68311d8a63c9a6e06dfdd7947b56f6f43f2c75504ae7d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-7802 Malicious code in @mentoring-services/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6248cce7fe3e50ce8c9fe940f959d883f287bff1a15d23813fa4dad7f960a486 The OpenSSF Package Analysis project identified '@mentoring-services/sdk' @ 10.20.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @mentoring-services/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6248cce7fe3e50ce8c9fe940f959d883f287bff1a15d23813fa4dad7f960a486 The OpenSSF Package Analysis project identified '@mentoring-services/sdk' @ 10.20.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7803 Malicious code in feedback-html2canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59673c0fc4701541ff9cf2002ba260a6cb6429a2b8ed7bd4398362bab5b421b1 The OpenSSF Package Analysis project identified 'feedback-html2canvas' @ 10.20.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-7801 Malicious code in slo-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43e18d91b3514c4d1f87bbc68730da7b0ce3213e132d2133cb2ee0d06bc07504 The OpenSSF Package Analysis project identified 'slo-schema' @ 10.20.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7800 Malicious code in dagit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bdc606f7fb150c7677aed483cf4e524fec208106f3ec8d573a646547034122fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7795 Malicious code in @vertiv-co/ui-library-nextgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffbf749ac60481466ea1b80f8cdcf3d84df099b6496876a765054477889570d6 The OpenSSF Package Analysis project identified '@vertiv-co/ui-library-nextgen' @ 10.0.2 npm as malicious. It is considered malicious because: -...

MAL-2024-7796 Malicious code in @vertiv-co/viewer-service-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a42df7da8768f315d6d12eb06fa799e0781561526ae3c71ad21f34b1dfe06411 The OpenSSF Package Analysis project identified '@vertiv-co/viewer-service-library' @ 10.0.15 npm as malicious. It is considered malicious...

MAL-2024-7793 Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7837 Malicious code in tyibyc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 786311540d56cd996efe5220ccf60e906bf9ba3659372a080971ecf9b2e858dc The OpenSSF Package Analysis project identified 'tyibyc' @ 1.5.31 npm as malicious. It is considered malicious because: - The package executes o...

MAL-2024-7783 Malicious code in chromestatus-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3f0ae839e77574e6fbdeb08227dfe2e2d3be958d34456a8cc4df440988db1e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7782 Malicious code in google-map-markerclusterer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6f6cce68b78a64c491ce96d722b6ae80bb91893fd7933538540e99bd4e30a9 The OpenSSF Package Analysis project identified 'google-map-markerclusterer' @ 1.2.8 npm as malicious. It is considered malicious because: - The...

MAL-2024-7781 Malicious code in angular-material-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc6ec3d00f5ac0565644d0b1fce06bf68473a14b48df88761451345f12c7475c The OpenSSF Package Analysis project identified 'angular-material-panel' @ 1.1.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7779 Malicious code in shadycss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 63b72ee48be67972ecef0ef8abb174f91a248b159d505d0cfc49975e6261dc01 The OpenSSF Package Analysis project identified 'shadycss' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7840 Malicious code in testjsonn2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d75d52ae07c9c9e2e6b773f2806c66631dd764da793bac0559e65bc4d0e7f66 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in testjson3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 783bce620b6d82880784734f95e5e48217bdc056277d57781a45fb14b66bcb97 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in testjsonn1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in fe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f10193d263c551e806779906e66b796c66043d73893719ea555b3c822b27adc4 The OpenSSF Package Analysis project identified 'fe-bootstrap' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...