1880 matches found
Malicious code in angl-archtslint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5d9cbbc6608e412a429d0d62fb5d10c38aa9be4ceb86df876f1f1aaafeb52ec The OpenSSF Package Analysis project identified 'angl-archtslint' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in jscrambler-cookies (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2030b82f282ea6a8622a42dfe9e944d63773863556536a6b8413c1141237854b The OpenSSF Package Analysis project identified 'jscrambler-cookies' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in wpi-xmldom (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ca72dd827e914309265980a13573c7017021ad948c7fb748b36707a9aa85e47 The OpenSSF Package Analysis project identified 'wpi-xmldom' @ 2.2.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in sankson (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 534fbedb1364b081bc2bfe7b675099176b6e2df503ee9b8e428a9815c589b224 The OpenSSF Package Analysis project identified 'sankson' @ 1.1.2 npm as malicious. It is considered malicious because: - The package communicat...
Malicious code in bugsnotfound (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3980d08da6629463ad50e50b6a94591add7f48be24c1256a14e6d3e56fe69f55 The OpenSSF Package Analysis project identified 'bugsnotfound' @ 1.1.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in spark-math (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b69ba236f6e65c975d31bbd86381ca28f0abc32e518869dbc220b8cfe2c526e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in flowtorch (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6c2c3f2d7423991d07fec2693f59f64eaa2f3a3d0122fbf6f05e19a6d2a40871 The OpenSSF Package Analysis project identified 'flowtorch' @ 9.2.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in false-positive-reddit-rce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18d0061817c889d31df1f475a5cb984705a83ac9e8117ef32c2429696d73ca20 The OpenSSF Package Analysis project identified 'false-positive-reddit-rce' @ 0.0.2 npm as malicious. It is considered malicious because: - The...
Malicious code in marvelmaniac-reddit-rce (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e0c11328bba9ebf6da62d82fc149892918b5830eef9816b5f887c46f1108fa0 The OpenSSF Package Analysis project identified 'marvelmaniac-reddit-rce' @ 10.0.3 npm as malicious. It is considered malicious because: - The...
Malicious code in eslint-plugin-ironfish (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ddb571e2a90d22e958b983fe2578c4dc66915310367953568399aa68773cc77a The OpenSSF Package Analysis project identified 'eslint-plugin-ironfish' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
Malicious code in nequi-aws-dynamodb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86e69f8ab2fe8a36bf3ee2e573ff2b19bb88d7dc072bd33275d8b8194b9b06dc The OpenSSF Package Analysis project identified 'nequi-aws-dynamodb' @ 1.3.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in eslint-config-onyx-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62b8e60882fd76fb4ef0935a91025d2bea424c98f200a89b041380859df410b5 The OpenSSF Package Analysis project identified 'eslint-config-onyx-ui' @ 3.1.3 npm as malicious. It is considered malicious because: - The...
Malicious code in jest-cucumber-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2fbf023b3a861ceda4ee89f2c188d2cf7e1b274a07fb7f0df58b9d86c6935b2 The OpenSSF Package Analysis project identified 'jest-cucumber-reporter' @ 0.0.9 npm as malicious. It is considered malicious because: - The...
Malicious code in papaya_pear_vicious (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 080555e8b0e713640ab3072d60fca6f3144f3738c13d3b46d93e89ebf87d0a15 The OpenSSF Package Analysis project identified 'papayapearvicious' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in yatai-web-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f548d205122fcfcec01de022463ec287546b7367481a1ec5adb29294e452b8f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cloudsplaining (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9d821ad444b4ae2d16e2fa2f9479b0175bfad2283012e98bf2d72d6d9f8fb71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in matlab-language-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8e3c9879f3555ae0c9a861940fee5bd9d19c1e5aced768ed7e1c303a896193a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in uitk-react-action-list-item (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5ae6c09c0106f49a13c2a2b42ec5ae87f855fce905b95188d6645f263a17bf8 The OpenSSF Package Analysis project identified 'uitk-react-action-list-item' @ 99.99.1 npm as malicious. It is considered malicious because: -...
Malicious code in hellodependency3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a806e7ee360d2e51a441f2f736fb58affcd5e7028d5e442fb2ea340f4655f187 The OpenSSF Package Analysis project identified 'hellodependency3' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...
Malicious code in @ms-atlas-module/datastudio-datafactory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 253e4743d8b8183de69bf226274c4bfcabf8516dc9b77f5e2a9772ad6a2e4747 The OpenSSF Package Analysis project identified '@ms-atlas-module/datastudio-datafactory' @ 0.1.36 npm as malicious. It is considered malicious...