Malicious code in unity-util (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d7a62539b563d36148b212913759293a68090ffa3505239a01cd432698619c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-977 Malicious code in discord.js-commandv14.1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6755481c28189c15e2d7c4b6e9aa1992ba3317cd999a39efef14219c69956d09 The OpenSSF Package Analysis project identified 'discord.js-commandv14.1' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-138 Malicious code in cagov-template-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6 The OpenSSF Package Analysis project identified 'cagov-template-v5' @ 19.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8768 Malicious code in newpackagetest2028 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f8a309179fb8daa3b3ff1d8a250fe566f5d138ab913e435928491185de07f1c Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

MAL-2023-8713 Malicious code in @diil-front/chip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74f3f685f9f7080b81701a037923a9621b51fbafb68a17e12d9ceffd47981a0a The OpenSSF Package Analysis project identified '@diil-front/chip' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

Malicious code in create-codecpetjs-bdd-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01558db89dd1a8c91f89f5484278ccabfae35f95f9d6500a80a42d59a704c4b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8701 Malicious code in fio-registrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d3cbe7451892cf4f9774a6bcb3341066aae53b0ebf3ac6ced5edf7cb86dee6b3 The OpenSSF Package Analysis project identified 'fio-registrations' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8700 Malicious code in spectro-cloud-docs (npm)

This package runs commands in a pre-install script that exfils sensitive data to a attacker-controlled domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5f48697cbdd8e8f64a4634d5d8ea37633a9f97394cf53ceac7d2e6a05fb41e Any computer that has this package install...

MAL-2023-8692 Malicious code in @dle-multiform-angular-component/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 820657ccb39c885de6a5d6006ee75064ffa46699e8af105375b12a67436649fc The OpenSSF Package Analysis project identified '@dle-multiform-angular-component/core' @ 13.0.1 npm as malicious. It is considered malicious...

Malicious code in moonpig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bf064eedf0d80bc14ce31e1deee2fd824472437a9fa79fb15602d6b09c478d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-song (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90ad9bfacffe2ec987335c33f6ec3024291b2cc98ae356cbc0f16a4051ec79b9 The OpenSSF Package Analysis project identified 'discord.js-song' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8436 Malicious code in onsurity-onboarding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f08d8e742760f69f6a097c7eae74d85b4135241f48e47d2ee27f867e319550a5 The OpenSSF Package Analysis project identified 'onsurity-onboarding' @ 0.1.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8422 Malicious code in bistrosk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 275abca8527ba6a0a29bf30537bad45fb01533a199b59ca9543da88dda4f8334 The OpenSSF Package Analysis project identified 'bistrosk' @ 200.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8313 Malicious code in @binter/inputs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8af4ce9af4a8aa4c73b982ed9efd19d17852cb4bf25a3d88ee221b98956cf9b4 The OpenSSF Package Analysis project identified '@binter/inputs' @ 1.7.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in company_package_my (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f3e6351419385dd63eeaa9bdd36d22be97aa05d213effc8f93ef580e76e7226 The OpenSSF Package Analysis project identified 'companypackagemy' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8123 Malicious code in @apps-common/ui-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis efafe7e60f7bde7ddddd2cdd0c5464da613f467cef65d985b5984f75a323a349 The OpenSSF Package Analysis project identified '@apps-common/ui-theme' @ 10.1.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-7922 Malicious code in twentytwenty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b5cb94b4e758aaabd499e42ac5e149391b5f11597501e5df504661a2d633122 The OpenSSF Package Analysis project identified 'twentytwenty' @ 1.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1489 Malicious code in marvelmaniac-devvit-rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9d8f161a565dceb33bc07806d7e65aae706550b73220940a4ff28cf2a50d5f The OpenSSF Package Analysis project identified 'marvelmaniac-devvit-rce' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1475 Malicious code in initial-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 294f1805f4758e548e1a43655503cb3826eff0c9f6aee78d5d0a16bf74018504 The OpenSSF Package Analysis project identified 'initial-app' @ 9.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in yatai-web-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f548d205122fcfcec01de022463ec287546b7367481a1ec5adb29294e452b8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...