Malicious code in remix-kl-c646 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83a85da0593ba62361a1b877e3000ed361c7f4fee4943ba4472a9f97648f7236 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in usdc.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c87f8dca2d6eefcdbdec42cfba8e7b187195b7531d277735a9e255911fc1e3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in prettier-v3-for-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 522c1e741b8482af7e3577e20c83b8e29a0f217b9c951d0e815e5c01af165408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11203 Malicious code in finn-pulse-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8556cda5df574e7c339a9e910f83692fefe384dd8c3c1107fafd270c8057a170 The OpenSSF Package Analysis project identified 'finn-pulse-init' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...

Malicious code in cdp-agentkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07ec87bf0a5899c4f97a1c0fcd453df1c220cea6a7a6944d6316f40f9def44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11186 Malicious code in cdp-agentkit-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d53da33893272680319756bf6d56dbd2de8b7d06bc19bd46c65f06c11336031 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pocfinalone.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57ba0a7f365bfa72152e4c3d1f5031f733dbc369cf392a3afdf557f70546bde3 The OpenSSF Package Analysis project identified 'pocfinalone.js' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11189 Malicious code in pocfinalone.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57ba0a7f365bfa72152e4c3d1f5031f733dbc369cf392a3afdf557f70546bde3 The OpenSSF Package Analysis project identified 'pocfinalone.js' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

Malicious code in @hmp/h-shelves (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 958f7fcbcf7ccd4ad3fe9f11b3f7ac3b23da0e6f97148383aa60fd3ea258d6d8 The OpenSSF Package Analysis project identified '@hmp/h-shelves' @ 2.0.25 npm as malicious. It is considered malicious because: - The package...

Malicious code in @hmp/h-image-uploader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 393baa73357f44a746ebe45eb2d74ed46234f46c3cfc528b4d221c1e3f945626 The OpenSSF Package Analysis project identified '@hmp/h-image-uploader' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in fetlla2-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 626ab8d342caf421b4ede0958a23d5fecc4a7272ca83f0a7b5a4bbf2349a845c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in canvaskit-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8fec757cb441808c4cf235ccb1ef0bcf9325ffebc3a5efcc43bc21669e0feb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kiosk-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c7f59314a206c7faa0082a49930dfe6b18851236824c9539436bf92a3f71a08a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hackbron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e583544fc400279671a5c9455e40671ab934ff7a923c364db2efda4aa29259f6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in graph-studio-billing-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware afd4325b249b7dfad124c21ffe39f85d2e38f1b6c2d31361f81e821adb8365ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @framgia/test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a84ece988632f5b1341c70168c0e8ca664277c904e9aae19d1541c7f7e2df3c8 The OpenSSF Package Analysis project identified '@framgia/test' @ 9.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in ens-app-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3332aa2e460c5078abc70574b16848871805818907149c50a3d7842e2a93007d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in codeql-sarif-security-standard-annotator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware daf28531c7b9ae5e115da81a3041d6e35bed2b6764cfabb14fdd1b11ff50a6fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @ba-ui-toolkit/ba-graphics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cecc8f033039168aed0576db76b1cae3235b3ec9b6634c22a38c1696a4a80fc1 The OpenSSF Package Analysis project identified '@ba-ui-toolkit/ba-graphics' @ 7.1.11 npm as malicious. It is considered malicious because: - Th...

Malicious code in newpipv3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 54fac2a807bae6742d82c86f55d97a1b4a810e42ee3b0b9dcb0c981c36ab712d The OpenSSF Package Analysis project identified 'newpipv3' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...