Malicious code in narratives-from-tweets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1570135eff60eea1dfd9ec7b66797d9454373263050b83c8ad90d2b7b37d71b6 The OpenSSF Package Analysis project identified 'narratives-from-tweets' @ 0.1 pypi as malicious. It is considered malicious because: - The...

MAL-2023-8307 Malicious code in narratives-from-tweets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1570135eff60eea1dfd9ec7b66797d9454373263050b83c8ad90d2b7b37d71b6 The OpenSSF Package Analysis project identified 'narratives-from-tweets' @ 0.1 pypi as malicious. It is considered malicious because: - The...

Malicious code in liblapack3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74012077041418bce1aed1339b95d0221435cff33db310194f29d9a0c2451e6e The OpenSSF Package Analysis project identified 'liblapack3' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

Malicious code in @siigo-arquitectura/button-atom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10fd520d1b3077c01e859228a807bb4d066d090fa3e1d1b287389a9f45d58a78 The OpenSSF Package Analysis project identified '@siigo-arquitectura/button-atom' @ 5.0.7 npm as malicious. It is considered malicious because: ...

MAL-2023-8301 Malicious code in @siigo-arquitectura/mf-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 519c8b7461f58c38192ea55bcd67f43659de4537eb6031f1882e2e2dee1acbee The OpenSSF Package Analysis project identified '@siigo-arquitectura/mf-helper' @ 5.0.1 npm as malicious. It is considered malicious because: -...

Malicious code in docupload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67162d52cf528df828bdd0efdf7165e3f51fbbbb09d41014c1620d8e1aaecd80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8293 Malicious code in f0-fpti-tracking-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e1d6cccf9ef65f34bdf293de4de123a77f8d39e6e7d1ec98fcaeb53ee57caedf The OpenSSF Package Analysis project identified 'f0-fpti-tracking-manager' @ 5.6.8 npm as malicious. It is considered malicious because: - The...

MAL-2023-8291 Malicious code in bank_cron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70064e0fa01accdeb5e78c99cf3b86d47cff2ad6e3bec52c9e45091e600bc5fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8279 Malicious code in webdriverio-browserstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 558220ecb7cc65dd1c6bd3cb85413d458fb89da42e9ec16e2e1811a252761b15 The OpenSSF Package Analysis project identified 'webdriverio-browserstack' @ 0.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8262 Malicious code in @atbdigitalteam/ui-widgets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2756dc0ffc0a9cddcb70299b7fc1cb3722a348f93647bf237c1f130ecb60ff02 The OpenSSF Package Analysis project identified '@atbdigitalteam/ui-widgets' @ 2.4.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-8255 Malicious code in csm27878 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0055598a8a443f1bd67fa612291473dcb36ba6e1c9927df85775eea3d207de11 The OpenSSF Package Analysis project identified 'csm27878' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8254 Malicious code in csmqrcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be3c7341134e3f6e8c5e298589bbf69296fe3056e225eb82b91aa3d23f5898a The OpenSSF Package Analysis project identified 'csmqrcode' @ 11.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8259 Malicious code in react-fixtures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 313318cff861c45bde316c24fa07d680f6c59e74a77ae6e65c31fe66f54e2f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8225 Malicious code in spaceboo-y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9861de0db14f13361149470204707691f9711304b4ed49c191312836812a955 The OpenSSF Package Analysis project identified 'spaceboo-y' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in amhairc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13d3cfae40288462dfd8b822c93d41e65a99b5d16d94e0c3ba536eaf9b5ee0bd The OpenSSF Package Analysis project identified 'amhairc-web' @ 6.0.0 npm as malicious. It is considered malicious because: - The package execut...

MAL-2023-8215 Malicious code in amhairc-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13d3cfae40288462dfd8b822c93d41e65a99b5d16d94e0c3ba536eaf9b5ee0bd The OpenSSF Package Analysis project identified 'amhairc-web' @ 6.0.0 npm as malicious. It is considered malicious because: - The package execut...

Malicious code in gatecrash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 763f1f221e08f4de4ac758d78eb73e70fc818031913727c20ef6053f65c402d4 The OpenSSF Package Analysis project identified 'gatecrash' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8216 Malicious code in gatecrash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 763f1f221e08f4de4ac758d78eb73e70fc818031913727c20ef6053f65c402d4 The OpenSSF Package Analysis project identified 'gatecrash' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in bbc-iplayer-sounds-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d586de5a3bb31f4049fd207aa2c3ffc23d175a74c56bc0a75c52fd116f5291a The OpenSSF Package Analysis project identified 'bbc-iplayer-sounds-chatbot' @ 5.2.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-8163 Malicious code in symphony-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1360bb9cfdd8afaf47d9444561048cc1f780fc6dd830a6d709320dc260bf7476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...