10247 matches found
MAL-2023-7919 Malicious code in aws-encryption-sdk-javascript (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ded7612b942b1e3da52d4dfc7abcb64d6ad4bd30d80fac04815238838f9f4763 The OpenSSF Package Analysis project identified 'aws-encryption-sdk-javascript' @ 23.0.0 npm as malicious. It is considered malicious because: -...
MAL-2023-7920 Malicious code in yoga-repo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfdba41ba7e979cb19d028f2a4caec895183aa268f5bf2a1b2e1ff086366a1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in yoga-repo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfdba41ba7e979cb19d028f2a4caec895183aa268f5bf2a1b2e1ff086366a1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ez-retro-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6931a4e6135ad2a4f946c7218b4fcf31f1efc0c75f0d58f96e9a5fa793a0e144 The OpenSSF Package Analysis project identified 'ez-retro-server' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-7916 Malicious code in ez-retro-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6931a4e6135ad2a4f946c7218b4fcf31f1efc0c75f0d58f96e9a5fa793a0e144 The OpenSSF Package Analysis project identified 'ez-retro-server' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-7906 Malicious code in ux-authentication-auth0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acc992350d87b94d42d60618d28b4f1111d7b55add45c9262f23033782743741 The OpenSSF Package Analysis project identified 'ux-authentication-auth0' @ 1.0.2 npm as malicious. It is considered malicious because: - The...
MAL-2023-1571 Malicious code in gapps-automation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fc1e430c7dfe87a465530b1e2067f640fda560b96555750466520fb727d8f19 The OpenSSF Package Analysis project identified 'gapps-automation' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1570 Malicious code in @dpdgroupuk/your-dpd-rest-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dc0b6ed54c73bb7b7cfbb33bfedad652cee9252913fd10dcc726d67cdea39f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1567 Malicious code in dexalot-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49e7d1e48c40c5dcc937fed7e2bf1fd9437a3886652c7fa4c6d14181cd5aca86 The OpenSSF Package Analysis project identified 'dexalot-docs' @ 3000.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1562 Malicious code in file-format-series-json-to-sketch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8508035009e823eff2a635014b28a526f6a2ed3a3132c185b572bb5cd26095ce The OpenSSF Package Analysis project identified 'file-format-series-json-to-sketch' @ 99.99.0 npm as malicious. It is considered malicious...
Malicious code in sketch-ipsum (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 722f81803d7487f9d05f1e65dfb836a6fa8821fd711b81a62cfe16061a549a99 The OpenSSF Package Analysis project identified 'sketch-ipsum' @ 99.99.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1546 Malicious code in marionette-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4962667c8dd0da2bbc76d598b0820a7371844141b721e7d346913fae8581c733 The OpenSSF Package Analysis project identified 'marionette-ui-components' @ 6.9.2 npm as malicious. It is considered malicious because: - The...
MAL-2023-1545 Malicious code in gradient-function (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d41bbe2c82b0cb7c5410006430478c3cc70133f726eda4f584c0f7f943ff938 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1542 Malicious code in lp-transporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11c496a4534fa74ceededa76f0d7d5d65094550a9ba71e4ee4f25e982cc16beb The OpenSSF Package Analysis project identified 'lp-transporter' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1540 Malicious code in js2restutils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d759ec94669349db98c7b1d0f6d4a5b916e9a2ae8b98efe8acaa421a3824d689 The OpenSSF Package Analysis project identified 'js2restutils' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in js2restutils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d759ec94669349db98c7b1d0f6d4a5b916e9a2ae8b98efe8acaa421a3824d689 The OpenSSF Package Analysis project identified 'js2restutils' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in lp-vue-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e0fc5aaed8de1640179a965d23507da2a63fc462c9349da8ed2eae78398c577 The OpenSSF Package Analysis project identified 'lp-vue-components' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1543 Malicious code in lp-vue-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e0fc5aaed8de1640179a965d23507da2a63fc462c9349da8ed2eae78398c577 The OpenSSF Package Analysis project identified 'lp-vue-components' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1536 Malicious code in react-vis-master (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b50bcb70f028287514bfdeca61e58907a79b80687a92a949e45abc009d38974 The OpenSSF Package Analysis project identified 'react-vis-master' @ 1.12.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1537 Malicious code in testtttecsc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b472556a0c7f3ae25ce3f656709d034c747b1f7c4158abf0850ed31061962e72 The OpenSSF Package Analysis project identified 'testtttecsc' @ 1.11.0 npm as malicious. It is considered malicious because: - The package...