2414 matches found
Malicious code in @fin-php/npms (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c46ddecabc6ffdb6fdcfe2d30dab50567e26874350c888ee02dd2869fb42124 The OpenSSF Package Analysis project identified '@fin-php/npms' @ 9.10.3 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1175 Malicious code in mytmobile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 676558f1795470bc642910cfcb649425633481aa4c72864aa4354baa183ee115 The OpenSSF Package Analysis project identified 'mytmobile' @ 99.2.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1145 Malicious code in odyssey-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...
Malicious code in odyssey-lint-staged (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b408f794010d1926bb9841d26fd28c91c97d8f11d71acea664c92ccb5a06a54 The OpenSSF Package Analysis project identified 'odyssey-lint-staged' @ 9.9.5 npm as malicious. It is considered malicious because: - The packag...
Malicious code in u-workflow.module.common.brand-safety (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 558ded355ca9595181f6d90b983a24679d51338462455e987540da8991afda50 The OpenSSF Package Analysis project identified 'u-workflow.module.common.brand-safety' @ 1.0.1 npm as malicious. It is considered malicious...
MAL-2024-1138 Malicious code in u-workflow.module.common.features (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43c063fa58fdcf0f64acc12e433390c9dc078ab6b6eb6dd773242db454f29a47 The OpenSSF Package Analysis project identified 'u-workflow.module.common.features' @ 1.0.1 npm as malicious. It is considered malicious because...
MAL-2024-1132 Malicious code in caas-static (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6944959a95e6d1bd73a53289912b43eed0d1855c541983e98a204359c5df0ba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1108 Malicious code in mle-py-connector (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91bb80bd9d7444d113ce05b2d2abac925c10e36a23ae955fd9ebd682cd046bd1 The OpenSSF Package Analysis project identified 'mle-py-connector' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...
MAL-2024-1098 Malicious code in geico_design_kit2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb947e32f21c9faa279b825aa5989d3a6fcbe09de00409c630dd824dc5ce42f0 The OpenSSF Package Analysis project identified 'geicodesignkit2' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in geico_design_kit2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb947e32f21c9faa279b825aa5989d3a6fcbe09de00409c630dd824dc5ce42f0 The OpenSSF Package Analysis project identified 'geicodesignkit2' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1094 Malicious code in fhir.base.template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d390c24638a730f4667334b430b5a02e28305f199a61a609e88c28c3dd5f5b36 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1093 Malicious code in sdge-it-tdg-dynamicloadprofiles-sempra-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7a435ca75f0214af0cf902eeb6293bba2778f04c71cc5afd45ac109c0a78c5 The OpenSSF Package Analysis project identified 'sdge-it-tdg-dynamicloadprofiles-sempra-poc' @ 2.0.2 npm as malicious. It is considered maliciou...
MAL-2024-1079 Malicious code in sempra-npm-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 872da23eea679ab4d72067d48ca21e2f235cb67bd63e176842a5137a873d5f96 The OpenSSF Package Analysis project identified 'sempra-npm-poc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in bugcrowd-npm-poc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46b2f058641ff9f8a06f7a20bd103fbfc37dc8ffcfc09d191ab7a8b9d0c35715 The OpenSSF Package Analysis project identified 'bugcrowd-npm-poc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1071 Malicious code in zksync-hardhat-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b8c577cf7083b6313dbfbed2524851699af41517cc400559d3f451d7846f7ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jitsi-meet-electron (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d00022cc6b75ddc259b9fe60993dbdf646c17b30cce6a76c88798ca229947db The OpenSSF Package Analysis project identified 'jitsi-meet-electron' @ 99.99.99 npm as malicious. It is considered malicious because: - The...
Malicious code in global-min-document (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f31926381530898f76c33bf3a3941e4c37e5866d33fbe1501baa831b6822165 The OpenSSF Package Analysis project identified 'global-min-document' @ 999999999.99.9 npm as malicious. It is considered malicious because: - T...
MAL-2024-1068 Malicious code in global-min-document (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f31926381530898f76c33bf3a3941e4c37e5866d33fbe1501baa831b6822165 The OpenSSF Package Analysis project identified 'global-min-document' @ 999999999.99.9 npm as malicious. It is considered malicious because: - T...
MAL-2024-1066 Malicious code in dropdownformfield (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2713d5570c40f202d4baa70c5d4b4a5ded51d6375ab052be5eb0a89de9d3e153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1061 Malicious code in unity-httpclient (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0977626ba11b5a72288f3676902a548d2ea29143cc48b35243974ae95e6c68f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...