1880 matches found
Malicious code in identity-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 172d924c44b4cff292645cf014382ea4d780ad62b2d7550d53d4825c83ac271f The OpenSSF Package Analysis project identified 'identity-auth' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in moblig-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a9601f46c6924bb210289c184590485d4dabf6696dc6c0da5720465002bcf06 The OpenSSF Package Analysis project identified 'moblig-npm' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...
Malicious code in samsungads-publisher-portal-authorizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bdf69166b497f7cd30a51ffff97b600796cbf77f8a34ead71e7ed700f40dfc7 The OpenSSF Package Analysis project identified 'samsungads-publisher-portal-authorizer' @ 99999.999.0 npm as malicious. It is considered...
Malicious code in browser-spoof (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 163b0aa2d0d3439a25800f6f383fbe268a69753591f918b10475d357d4e4a533 The OpenSSF Package Analysis project identified 'browser-spoof' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in cagov-template-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6 The OpenSSF Package Analysis project identified 'cagov-template-v5' @ 19.2.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in newbooking (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c36258c896dcadd103fd2263e6d19e4ae885350c438c2efc971e816f7d39215d The OpenSSF Package Analysis project identified 'newbooking' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in @neogov/linkanx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 133eddd55383f57d0ee29c0a3eb7343b9118e95d6c54ab71bb75aa457dd5d2d0 The OpenSSF Package Analysis project identified '@neogov/linkanx' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in internal-test-devoxx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb92a072265a550a5ce1cc1d16f096b636845bc8edabaf60bddfebad43c423bd The OpenSSF Package Analysis project identified 'internal-test-devoxx' @ 0.0.4 npm as malicious. It is considered malicious because: - The packa...
Malicious code in j5-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eac2e249ebbccb3255a8760bd35b3e6fd100192fe0801b54e53231a71a0789a1 The OpenSSF Package Analysis project identified 'j5-test' @ 1.0.1 npm as malicious. It is considered malicious because: - The package executes o...
Malicious code in holamessironaldo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4cf4c0a7f778816c700f59e8c286e22f3be855d4eb810b280ddc301ce4c190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @cartus-core/cartus-common-ui2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dda6d81204f2c556310cb11a7875e4f74aff47c159c093a77d424c32911db2e6 The OpenSSF Package Analysis project identified '@cartus-core/cartus-common-ui2' @ 11230000951.0.6 npm as malicious. It is considered malicious...
Malicious code in sparxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c525477f636a7370201288e33ac0e0c31a9fd3d2919fb8d165092fcf367942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tsrcrcetest1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81236969e1e7e6ddfdffe293e1d918b357ce193fc362e722a7b75bce480e1bbb The OpenSSF Package Analysis project identified 'tsrcrcetest1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in rcetest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ee58b9e6d758cb339bd2d6605b131d84f7829a9299889967e3f5ca31d69d120 The OpenSSF Package Analysis project identified 'rcetest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes o...
Malicious code in chain00x_rce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f3656f34947ab9c7e747961055e3697ca5d51e275e42ca7fae5ab01f1c2e7ef The OpenSSF Package Analysis project identified 'chain00xrce' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in biscits (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68cd2f1bb198e032dc091d1cca16fb8e548fca53bcacbd76cf231ea7fd569b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in multicolored (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89f0e1660e4708cd5f0568f9c85ea2f35f883c21cb0f6a7d37e4d9d25a1dc8c8 The OpenSSF Package Analysis project identified 'multicolored' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...
Malicious code in vibrant (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaa7491953b666535f724cc8b060802509b09ef8e13b4f3c5ebaa6a0554e4c17 The OpenSSF Package Analysis project identified 'vibrant' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...
Malicious code in newpackagetest2027 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7c1e4acddbaeafd87b1cce82ddc1025a3e5abd4c285a2fd2e7fcff07d37d500e Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...
MAL-2023-8768 Malicious code in newpackagetest2028 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3f8a309179fb8daa3b3ff1d8a250fe566f5d138ab913e435928491185de07f1c Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...