Malicious code in @desesap289/dev_dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac047c7ec6034e7a80c74ca32646da104b86b3f39c46f7f836deeebebeb53b20 The OpenSSF Package Analysis project identified '@desesap289/devdependency' @ 10.20.9 npm as malicious. It is considered malicious because: - Th...

@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +415 more potentially affected by CVE-2024-23331 via vite (>=4.0.0, <=4.5.1)

vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2024-23331 Source advisory: OSV:GHSA-C24V-8RFC-W8VW...

MAL-2023-1113 Malicious code in another-dev-dependency3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2abbde4690eaad1109288e153cb368899f235ec85219b2f867f2f11cfad6a078 The OpenSSF Package Analysis project identified 'another-dev-dependency3' @ 3.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in extraneous-dev-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e08815dacf458e78940833dd89e08a808779aabda6f12833e3ca42e28a3d0cdf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...