Malicious code in newpackagetest2026 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b2facdf5925f09b064136d0c919a80e0e83d0a13b4b6f9d903162352c586dc9 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

Malicious code in flow-session-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98ef7d6ade8e634b82bd1d79345489c30800a8b1078467e02c1bd113b1ce0f16 The OpenSSF Package Analysis project identified 'flow-session-guard' @ 99.99.993 npm as malicious. It is considered malicious because: - The...

MAL-2023-8713 Malicious code in @diil-front/chip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74f3f685f9f7080b81701a037923a9621b51fbafb68a17e12d9ceffd47981a0a The OpenSSF Package Analysis project identified '@diil-front/chip' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

Malicious code in fio-registrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d3cbe7451892cf4f9774a6bcb3341066aae53b0ebf3ac6ced5edf7cb86dee6b3 The OpenSSF Package Analysis project identified 'fio-registrations' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8701 Malicious code in fio-registrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d3cbe7451892cf4f9774a6bcb3341066aae53b0ebf3ac6ced5edf7cb86dee6b3 The OpenSSF Package Analysis project identified 'fio-registrations' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in twk-boilerplate-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e55b9fb271d1d1fcc3ac27783bc95ed7cbce8762d35cd7f2635490e25b9263b The OpenSSF Package Analysis project identified 'twk-boilerplate-template' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in @dle-multiform-angular-component/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 820657ccb39c885de6a5d6006ee75064ffa46699e8af105375b12a67436649fc The OpenSSF Package Analysis project identified '@dle-multiform-angular-component/core' @ 13.0.1 npm as malicious. It is considered malicious...

Malicious code in @huby/infovist-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a9d9af98833f94e0e3d73a4dc90f662b96da4620bdbacdc5121e08983b066b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdf2htmlex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7fdad8330a64af4a946fe1ba37ed64c71c1185fa07ff7dba06646f64fc0cc26 The OpenSSF Package Analysis project identified 'pdf2htmlex' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in lc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d918d66169ac2696569bb389d82b0b95640986fdc77ab8cec9639908d156d0c5 The OpenSSF Package Analysis project identified 'lc-config' @ 5.5.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

Malicious code in moonpig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bf064eedf0d80bc14ce31e1deee2fd824472437a9fa79fb15602d6b09c478d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in otnet-ory-network-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19a9ebfed32ec491b007a6c7e65f8ebae68d0acc3175b56442fa67e25fc916fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in logpeck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4211ee8e232512f2d7fd8b78017d04589e493ba03994dd3a4cebc62898d2820 The OpenSSF Package Analysis project identified 'logpeck' @ 4.4.0 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in jerrytestjerry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afcd6612db745033b56fd846df2a95e2611a705900675bdd152150c2518fc2ed The OpenSSF Package Analysis project identified 'jerrytestjerry' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @atea/warranty-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b073b818c3493a216e9d334b7f02042f6dbf9b7cea8bbf563b07b5af22952bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @zscaler/api-enums (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c39d52170e43f12fe7201b08e2de04584d74da45150b565ffc66b523ef4d9b73 The OpenSSF Package Analysis project identified '@zscaler/api-enums' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @zscaler/ec-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31bceaac08bb6d621ea722590b8ba815799a6af81cc537fa0796ea7983b0f1d2 The OpenSSF Package Analysis project identified '@zscaler/ec-domain' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @klapp-shopping-search-v2/data-types-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0e8d176a82dfeb7aa75dd056e4e66c0e63b0f138dcf969a3b0399a60da3bad1 The OpenSSF Package Analysis project identified '@klapp-shopping-search-v2/data-types-public' @ 0.0.0 npm as malicious. It is considered malicio...