MAL-2024-11926 Malicious code in tracking-protection-experiment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7e3c4e6767c5b9de18b97979fd15fbe90fdc3b01d78bb3ce044f224e588787a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in blz-internal-pkg_update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c0576719ed89c86b80e8064de18e089618752aa208fa88dfc410ad73e84bf8e The OpenSSF Package Analysis project identified 'blz-internal-pkgupdate' @ 7.7.11 npm as malicious. It is considered malicious because: - The...

Malicious code in pornhub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa7d63cf358dbea3acbf0ff8b3a7d859a3d6070c17c3a4acdbf01f3b0d18ccbb The OpenSSF Package Analysis project identified 'pornhub' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in auto-assign-team-actionn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84658b8c37896aa0e8c456f986500c73ce8af5a8e7696decc2db2a6fb7b450d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

Malicious code in focal-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a810e0097be46a2d0ef76ac3c6aa2088c3467e69485c408f22014bc66dd07530 The OpenSSF Package Analysis project identified 'focal-examples' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in anargha-manu2324 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5d8b88223767d58cf126c0232a9c2106316053505e2b4d4fdefe17848c1b3561 The OpenSSF Package Analysis project identified 'anargha-manu2324' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in haefgerasgrae (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c51eb8de5b4c76701af20deeb703ba85374c2036c17fd5bcd09b7b0233c6ae34 The OpenSSF Package Analysis project identified 'haefgerasgrae' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in pai-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b6dc3e380e435ff7d74a44ec8841c1577a1bd74c03ef3dc368e2514e485d8fc The OpenSSF Package Analysis project identified 'pai-web-components' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

Malicious code in tsanjint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51bc4162c9661fcf380821e0b575282ec5c1e6d7a6732cc427c637a581d909e1 The OpenSSF Package Analysis project identified 'tsanjint' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes...

Malicious code in @saferpay/eslint-config-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49038c65a69ff50fde7f32068fe7d4705c0ff7424bd0e86e6f87ab5593a99949 The OpenSSF Package Analysis project identified '@saferpay/eslint-config-base' @ 5.9.2 npm as malicious. It is considered malicious because: - T...

Malicious code in @saferpay/eslint-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1623fcac8f83c2a752fa07e95cf1391d1f31dd3b8f757f4dbf3e3c170eb7d88d The OpenSSF Package Analysis project identified '@saferpay/eslint-config-react' @ 5.9.2 npm as malicious. It is considered malicious because: -...

Malicious code in @saferpay/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2d3c2e7f9c105a15779b795e9c5e4108f8e8ada94f9d6af1446e4b0e19fbd3 The OpenSSF Package Analysis project identified '@saferpay/components' @ 5.9.2 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @saferpay/react-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf4cc2b21097670e4c1c216967552f761f10ded3eb65a4a4b705aa0a5d6943e6 The OpenSSF Package Analysis project identified '@saferpay/react-library' @ 5.9.2 npm as malicious. It is considered malicious because: - The...

Malicious code in solhint-plugin-openzeppelin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4a4cea0f7210535e002b329fb3bd7a547d17cac3f0db1831009855d61000a0a The OpenSSF Package Analysis project identified 'solhint-plugin-openzeppelin' @ 99.99.99 npm as malicious. It is considered malicious because: -...

Malicious code in uchiwa-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93c81ac91a1060b8f7257839e951572af3ef296d5fecede6f6e9bf69bca76d25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openai-realtime-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mattermost-cloudnative-bootstrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 214848c247a651fda2867e7d1f8caa5843eb4c89463a1313c6b987cd1c0f73e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rarible-program-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ebfe242bd7c35911f61115ae2c00d485a5bb93b81ddf36f6f40af24fb1cd977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simulation_service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf6c7d5222c0cf39b74d1359864f3ae93cef37354056d3bed6b1d95df61d66a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...