MAL-2024-10534 Malicious code in sinbad-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f181de0b5c41b2ff3139ad931aa14a952a57050fb7f70b4a11175b8fdc2d7f7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10472 Malicious code in jupyterhub-admin-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2bee2e180dd90b59b6e2eec893ee6c4728364ca53979d371ae2f6b3c20b5198e The OpenSSF Package Analysis project identified 'jupyterhub-admin-react' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in controlnot-aux (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a99770ef01fb53c863387ed64967ab6ed42be0cf7c901573dcd472db6ae51091 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10827 Malicious code in ohta (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7f2c34601fec54dbf6ebf413c8f72f306ce11e3e00b028828514fff920676e4c A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10647 Malicious code in kera-preprocess (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6eb322e12f02f6acf94ad19bc2b1c261a2753e3bc4dd74a82a63e31d73e5d9bd A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10638 Malicious code in compressa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0cabf2172928d772d626ba857400e15f273fc925a9ff75e7f655ce461e9be498 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10425 Malicious code in bytedplus-rec (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 60f79f83c8af55853fc5ee2cbcd855f6799c4d5fa43cae98ddf63d0aa5f5fc23 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in appdynamics-protobuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37a52fe7743188afac58b43269afe61a049bed39642c33558912976f5d73757e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10327 Malicious code in sc-libraries (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e685150357e5118f6b99d29dcc954b4c5e33389fc7764e15ac72be42fbc1e27a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vpsnet-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a6306e16dc768df2420085aa5f4943c50eb1d96ddd9040f840df1b8f7b256b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10270 Malicious code in @cb-global-design-system-tokens/tailwind (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8f263b2c460c81b4e6f61cc1ce72351cf2f0b2d9ff3b745181715ca4296e22e2 The OpenSSF Package Analysis project identified '@cb-global-design-system-tokens/tailwind' @ 1.0.21 npm as malicious. It is considered malicious...

MAL-2024-9452 Malicious code in pwn2day-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0511d29fc5da2e5b913f1015e3a397abcd973ec98bffbff3b41a857ba68dab31 The OpenSSF Package Analysis project identified 'pwn2day-shell' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9047 Malicious code in world-id-sign-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4873832af5f4bd979a3e2a9acbbcb678f3801e41833eda8c895bdcedf7e1fb36 The OpenSSF Package Analysis project identified 'world-id-sign-in' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9027 Malicious code in repo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 475962f34cf11b2eb56bc65cbb239a83bb17063ca8bb9b0f03d295a5b88e4b6a The OpenSSF Package Analysis project identified 'repo-private' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8999 Malicious code in @helvetia-italia/ng-selly-lib-operator-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1fd81a66a867d353506b97a895921b666f5831fa169eb6cef4e07ef98e259328 The OpenSSF Package Analysis project identified '@helvetia-italia/ng-selly-lib-operator-dashboard' @ 10.20.37 npm as malicious. It is considered...

MAL-2024-8930 Malicious code in @the-c-company/scope_packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36ddd29067e6d60944a4f72e473733f61a21a1f7bd5c731b167d44236a178fbd The OpenSSF Package Analysis project identified '@the-c-company/scopepackages' @ 1.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in cap1-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5b8be093bde3967e8014195e003d06618727ecdc4b285008efd0ac95fd7c988 The OpenSSF Package Analysis project identified 'cap1-application' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8838 Malicious code in @zarafront/lib-zds (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b7da81ddf52154f443baa27b56764a0be023447376bd6d8a3f587cc7db455f84 The OpenSSF Package Analysis project identified '@zarafront/lib-zds' @ 99.50.55 npm as malicious. It is considered malicious because: - The...

MAL-2024-7899 Malicious code in @taxify/smartpickups (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d20e7ecf4639b1082be1a46fec756d84cc7d8fc35310af0e6af87e19879fcf7 The OpenSSF Package Analysis project identified '@taxify/smartpickups' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7830 Malicious code in symphony-familiarity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff03dd28a4225440b053e0619ca9619d5c18fbd90e59b8513587d836b4df052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...