Malicious code in importlib-metadate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b6db8994d6a78a5d0d95df2d0add2257ee6188f8c5419cbd7e2813426739d15d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: baidu-readver Reasons based on the campaign: - The package...

Malicious code in nt4padyp3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ccc059efb56cb7ca8b8c413c9b0711b900e5b98d371c30e58b3a5056f5c06d18 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: baidu-readver Reasons based on the campaign: - The package...

Malicious code in @cart-ui/core-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89568273084fef75464b1c975014417bf122a818685035e43012bb1ff5c3ba33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in leocare-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 311899bcdd83d3cd308268641290fc8fd0f503d308fc1bbf7488b5f0fab734cb The OpenSSF Package Analysis project identified 'leocare-new' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in cvsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1dca03039860936ed84ad166255f648867de3e96266b00da0234c232f24f16a The OpenSSF Package Analysis project identified 'cvsr' @ 2.2.1 npm as malicious. It is considered malicious because: - The package communicates...

Malicious code in aws-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b192498364ed7190f44f00a98983087f969407bd217eadfed1c6353335eda7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in randombullshitgo-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 057c8df14eaa8785b6129f2c579be84c7330b0f8d7e9bb6eff202f60bdddabfd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in braintree-utilities (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ba47f404b8012a3baa206a37fd59066ff35442cb95da8ba7bd1b44a6b9a7968 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1556 Malicious code in rey-vue-smarttable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a856f629a1b4854c5202dbdd7b0919ec1ad20cd28a8fa2b52591843913f112 The OpenSSF Package Analysis project identified 'rey-vue-smarttable' @ 19.19.19 npm as malicious. It is considered malicious because: - The...

Malicious code in rey-vue-smarttable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a856f629a1b4854c5202dbdd7b0919ec1ad20cd28a8fa2b52591843913f112 The OpenSSF Package Analysis project identified 'rey-vue-smarttable' @ 19.19.19 npm as malicious. It is considered malicious because: - The...

Malicious code in rey-vue-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 247fab9bb0397ec89a23c30830567d777402a4710831af3d3edfc1c1c6dd2328 The OpenSSF Package Analysis project identified 'rey-vue-common' @ 19.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1555 Malicious code in rey-vue-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 247fab9bb0397ec89a23c30830567d777402a4710831af3d3edfc1c1c6dd2328 The OpenSSF Package Analysis project identified 'rey-vue-common' @ 19.1.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in client-onboarding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 762eda8c988435ad6b160c429812de5a603401f5a6463f37bb48160ba53305b6 The OpenSSF Package Analysis project identified 'client-onboarding' @ 7.7.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in cpr-mfe (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

Malicious code in stw-tenant-library (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in wdio-api-client (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

Malicious code in mcft_client (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

Malicious code in xloportailcfn (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

Malicious code in stablecoin-evm (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware...

Malicious code in tec-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 125ddb22e15354e2319586116faa892343d4a86c8f79c9d6ed274d9acfb5f20d The OpenSSF Package Analysis project identified 'tec-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...