111 matches found
MAL-2023-1295 Malicious code in shein-bbl (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eda3e2bdbc515dead593a808202f565c6b47090d1b73b40cda908b6786eaf4ac The OpenSSF Package Analysis project identified 'shein-bbl' @ 0.1.4-beta npm as malicious. It is considered malicious because: - The package...
Malicious code in gitlabhook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07cc248a040f88d3052194678254b7bc9be0a2f3f9dda89ed16981c2c86510ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1085 Malicious code in @mddsfmsdflm/itemselector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 88f4e295b9c4b793c8ffbdc4077606b6d5b61c41ab83b85bda2b46680c678174 The OpenSSF Package Analysis project identified '@mddsfmsdflm/itemselector' @ 103.0.9 npm as malicious. It is considered malicious because: - Th...
Malicious code in itemsselector (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 607e39766ebd77980775c45bf29b7b5ce6a18704c30bd4e722cde47b95d53b0b The OpenSSF Package Analysis project identified 'itemsselector' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1216 Malicious code in itfd (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b402206ef266d63280b9361618b5ece377520d29080572d05c4a7dd0010f1e54 The OpenSSF Package Analysis project identified 'itfd' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...
MAL-2023-1335 Malicious code in verycoolzpac2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 50b609e8ebccac67716745b1447224238ae17c0a78499f90c48aa684d971cded The OpenSSF Package Analysis project identified 'verycoolzpac2' @ 0.0.3 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1367 Malicious code in httprequesting (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb5f0b4d8a20b23a261bca2323ce8fbbbea6f868f64ab6aa260be08dd59ee6e7 The OpenSSF Package Analysis project identified 'httprequesting' @ 3.0.1 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1149 Malicious code in cyclotron-svc (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e85bc4be6ce6305854af5f127e24fadaae007a239665a2d6f45fd86d26aa4fc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1322 Malicious code in thisisjustfortesting (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59cdc01afa05cd90c8814ecd8dd94f555b32681004eabf13194d1f7b6c52d4f9 The OpenSSF Package Analysis project identified 'thisisjustfortesting' @ 1.0.2 npm as malicious. It is considered malicious because: - The packa...
Malicious code in ticket-parser2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee92fd5b97c5234a0a301b915037b0f7285c820216158c9bef86dc7c08e16661 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ticket-parser2-py3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c4ed8944d1857578a442a65eb150261698ec277d1abc7ec86756286f5904cef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...