122 matches found
Malicious code in google-login-flow (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @toptal/picasso-accordion (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in mr456 (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in pxsceneui-example-02 (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in fatfingers-mybigpackage (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88e4a0b4467183a638b6bae4c3739d660c18ac89afd44874a38e336354b09f0d Any computer that has this package installed or running should be considered...
Malicious code in nb-tsconfig (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in design-system-cmp (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in effect-layout-function (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in invalid-dependency (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in @justworkshr/alma (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in talk-desktop (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in css-blocks-ember (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...
Malicious code in example-app-node (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in meli-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 152f98442370419a0e0c3fb36c2e01d398741677238bd205877b136806a6922b The OpenSSF Package Analysis project identified 'meli-api-client' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in lyft-sync (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bad08278af65d859072402dbc935300d4c8d6036f2f214644533c0af1b8f7b8e The OpenSSF Package Analysis project identified 'lyft-sync' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in godaddy-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbc982202586a71e3e0e5ad119c42a6517f839d2b74320b097508397b127243a The OpenSSF Package Analysis project identified 'godaddy-sdk' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in bookingcom-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3efaad9e12b23a4ec5230344045108f961982d137157a29edb1283679f35031 The OpenSSF Package Analysis project identified 'bookingcom-tools' @ 999.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in dbximgs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3a752546905d1373f7b092a98454b7ca4e820bebecb1af358ce0a6a72fa9a1e8 The OpenSSF Package Analysis project identified 'dbximgs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicat...
Malicious code in yelp-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f281d7fb655f7083b4004d10fb257b419c7aeaf1ea0b79636721d4724aec51d9 The OpenSSF Package Analysis project identified 'yelp-lib' @ 17.1.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in feature-preserve-portrait-editing (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 655ca5fa8c26583d141a0d6f86c0bca2e156cbad062d86ff11ec6827d2ac9cf7 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...