113 matches found
MAL-2024-7899 Malicious code in @taxify/smartpickups (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d20e7ecf4639b1082be1a46fec756d84cc7d8fc35310af0e6af87e19879fcf7 The OpenSSF Package Analysis project identified '@taxify/smartpickups' @ 9.999.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-7830 Malicious code in symphony-familiarity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eff03dd28a4225440b053e0619ca9619d5c18fbd90e59b8513587d836b4df052 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ml-keyframer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07ec4b17c5706200b2e45890a6bdc64b07c775904116aa6a09c5bfd8473d16d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-7801 Malicious code in slo-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43e18d91b3514c4d1f87bbc68730da7b0ce3213e132d2133cb2ee0d06bc07504 The OpenSSF Package Analysis project identified 'slo-schema' @ 10.20.2 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7670 Malicious code in sap-catorder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4d0a65fe6fa8befaf90ff6e8553923a6f0018202e771c06fbabca90482ce306 The OpenSSF Package Analysis project identified 'sap-catorder' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sap-assign (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e112087f561ca61a642cf1a40c5cc1e7dbed013d9b068897a47af54b8b6c653 The OpenSSF Package Analysis project identified 'sap-assign' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in sap-addr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a86f1f5a5ebc610e32833675417c2fd45fd2d4e3cf39177e17a751d54c0599df The OpenSSF Package Analysis project identified 'sap-addr' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in genaiscript-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb751d77363fdcebae7c4876de9a26b85a29be3677d2de516fb1c4e9cfd244c1 The OpenSSF Package Analysis project identified 'genaiscript-core' @ 0.4.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1566 Malicious code in ct-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e783edf3831848aac61070e6d4fcd03fb9023946d4c766f49e7d35b0403baa6f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1556 Malicious code in rey-vue-smarttable (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a856f629a1b4854c5202dbdd7b0919ec1ad20cd28a8fa2b52591843913f112 The OpenSSF Package Analysis project identified 'rey-vue-smarttable' @ 19.19.19 npm as malicious. It is considered malicious because: - The...
MAL-2024-1555 Malicious code in rey-vue-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 247fab9bb0397ec89a23c30830567d777402a4710831af3d3edfc1c1c6dd2328 The OpenSSF Package Analysis project identified 'rey-vue-common' @ 19.1.2 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1553 Malicious code in @ing-caf/cdn-proxy-plugin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 24ccbe0b13f81d2fe8d285bab144167d33f7b4e167833ebf615411db6d318eb6 The OpenSSF Package Analysis project identified '@ing-caf/cdn-proxy-plugin' @ 200.0.2 npm as malicious. It is considered malicious because: - Th...
MAL-2024-1542 Malicious code in testpentesting123xyz (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36685d552523fa8f2d9de645b437d7cecf143d10232afb786da7ff9d224afc2a The OpenSSF Package Analysis project identified 'testpentesting123xyz' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-1390 Malicious code in hello-1st-anni (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7324e12f4247915474315b0c6446c86c97ef20bca17e3baa9b31478fc7e612d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-1253 Malicious code in stake-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b55c374f66443cf75e6670357a98d26a83f7f6dfb5e9b4a72da9f3f21f75ded6 The OpenSSF Package Analysis project identified 'stake-api' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1173 Malicious code in google-requests (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f65c90bd401794ac768545381277a23159e66aa5b42a5ea05a38780fbcd691a The OpenSSF Package Analysis project identified 'google-requests' @ 99.2.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1136 Malicious code in region-selector-content (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff0393e9f3a6a405065088df076729bb9436bdad64329c0f3eb1dfd8a5ad6638 The OpenSSF Package Analysis project identified 'region-selector-content' @ 99.3.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-1130 Malicious code in pulsate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e071febdd58970db5d85c86868aa5832ed6344d90733fb474caeaf317c138cf1 The OpenSSF Package Analysis project identified 'pulsate' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicat...
MAL-2024-1110 Malicious code in abcotv-constants (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aecde97eb6bd30d0ab5c8787d1bd2f6d5fe38f5078d015135b8e267e5558b89e The OpenSSF Package Analysis project identified 'abcotv-constants' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in formvalidationtestauth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dcf38fb613aff5c787e7fb76b6868b7902d77add08013947cf91edacbac4f077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...