MAL-2023-1217 Malicious code in javascript-appfabric-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f8b7cd0cdd29ede135536b1e9ca802d8bfd2343e149fb7fd4ff7de38a4d1813 The OpenSSF Package Analysis project identified 'javascript-appfabric-logger' @ 966.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in javascript-appfabric-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f8b7cd0cdd29ede135536b1e9ca802d8bfd2343e149fb7fd4ff7de38a4d1813 The OpenSSF Package Analysis project identified 'javascript-appfabric-logger' @ 966.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in gd-company-updates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c1253df2e743d9b41ff76588069c9ee739cc67b4ca244e95405d4b949bcdfb2b The OpenSSF Package Analysis project identified 'gd-company-updates' @ 14.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1185 Malicious code in gd-company-updates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c1253df2e743d9b41ff76588069c9ee739cc67b4ca244e95405d4b949bcdfb2b The OpenSSF Package Analysis project identified 'gd-company-updates' @ 14.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1085 Malicious code in @mddsfmsdflm/itemselector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 88f4e295b9c4b793c8ffbdc4077606b6d5b61c41ab83b85bda2b46680c678174 The OpenSSF Package Analysis project identified '@mddsfmsdflm/itemselector' @ 103.0.9 npm as malicious. It is considered malicious because: - Th...

Malicious code in coveo.analytics-fts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6043a9b37b40dc82161ee17610e0b57801c116d25e9164912ac9352ab55c9c00 The OpenSSF Package Analysis project identified 'coveo.analytics-fts' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1147 Malicious code in coveo.analytics-fts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6043a9b37b40dc82161ee17610e0b57801c116d25e9164912ac9352ab55c9c00 The OpenSSF Package Analysis project identified 'coveo.analytics-fts' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in highchartsofflineexport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56b77fcce628a512104cc7c6e01e42f19e4f763ba48088ba71ada5bc80971b60 The OpenSSF Package Analysis project identified 'highchartsofflineexport' @ 100.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1105 Malicious code in @satsuitesdk/score-choice-policy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13b7a2826acee9e7a7baa9fc7b0862136ceff1009f5c59474b93511a266abd1e The OpenSSF Package Analysis project identified '@satsuitesdk/score-choice-policy' @ 0.1.2 npm as malicious. It is considered malicious because:...

MAL-2023-601 Malicious code in mintel-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 03a09fa2fc3578a5c0280069c7cd04c797a86836c205896be3dc0fb53c5b3353 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-602 Malicious code in mintel-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0a1835239b54b7888436777e7e123e588fdbf2fe1ca95d9162e6803d5027515e Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

MAL-2023-851 Malicious code in test-op-solhint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f8f315fe20128ae26be541522255c4eeab47ec166f70e54ca5a2c6cb533ae67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in this-is-malware (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a09f1ea3e612edb3afa0fb412d98d5c1ce03b4303b89288ce84357b49b25a3ac The OpenSSF Package Analysis project identified 'this-is-malware' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-1420 Malicious code in this-is-malware (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a09f1ea3e612edb3afa0fb412d98d5c1ce03b4303b89288ce84357b49b25a3ac The OpenSSF Package Analysis project identified 'this-is-malware' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

Malicious code in pack-123-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147b1fbc2985e829ebc40869208b16815788e67b83a8670679e6399dd6515755 The OpenSSF Package Analysis project identified 'pack-123-new' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in yelp-js-error-reporting-init-error-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0ef31127203cf701c7aa890cdebf10454c53c989cb98015927e9b62881c7bf6 The OpenSSF Package Analysis project identified 'yelp-js-error-reporting-init-error-reporting' @ 19.20.20 npm as malicious. It is considered...

MAL-2023-1349 Malicious code in yelp-js-error-reporting-init-error-reporting (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b0ef31127203cf701c7aa890cdebf10454c53c989cb98015927e9b62881c7bf6 The OpenSSF Package Analysis project identified 'yelp-js-error-reporting-init-error-reporting' @ 19.20.20 npm as malicious. It is considered...

Malicious code in client-ws-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32231907789db551e533776ab68a4a01f4029a0723291d70d65927559eb647d2 The OpenSSF Package Analysis project identified 'client-ws-app' @ 5.20.20 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1265 Malicious code in payouts-sdk-samples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3db91ea244189b9afd98f67f2aa7ce4dd00812c2ab83bba670a7f9d285cf167 The OpenSSF Package Analysis project identified 'payouts-sdk-samples' @ 99.20.20 npm as malicious. It is considered malicious because: - The...

MAL-2023-1213 Malicious code in int_access_worldpay_sfra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97111e27f0fa3c0c573ceec6fba991c479ff7517b8043bdce5bb5150aa6644e8 The OpenSSF Package Analysis project identified 'intaccessworldpaysfra' @ 99.19.19 npm as malicious. It is considered malicious because: - The...