Malicious code in eslint-plugin-rossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 35e31ca4335b37c9acf1cc537c185f8c152911f991e75e3b8b248348d7f42e0a The OpenSSF Package Analysis project identified 'eslint-plugin-rossum' @ 7.7.7 npm as malicious. It is considered malicious because: - The packa...

Malicious code in rei-browser-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffe49e96d371fc539149fcb75a89d544ef18735fa7563a7c5aa1d05d1d4650db The OpenSSF Package Analysis project identified 'rei-browser-shim' @ 100.99.99 npm as malicious. It is considered malicious because: - The packa...

Malicious code in manoj-app-css-alt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c88dab3b32782f38a2c1b962d842f1c4c52400df0c5622d73f4989ebc8381f6 The OpenSSF Package Analysis project identified 'manoj-app-css-alt' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in extrafee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47b8fc5fe34861f3bc946919d0be2e616339384dd0ef276e64c0c9c891cc3002 The OpenSSF Package Analysis project identified 'extrafee' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @fdp-tools/helm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bef4a02ea616732eda209303ce418b0fbf07d43995a8ac48bada7b7967f78819 The OpenSSF Package Analysis project identified '@fdp-tools/helm' @ 0.1.11 npm as malicious. It is considered malicious because: - The package...

Malicious code in @fdp-tools/eslint-formatter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5159c12014f3592f859dffa0d8c21b7f183b426a36d2de61f052cfa79fc5e809 The OpenSSF Package Analysis project identified '@fdp-tools/eslint-formatter' @ 0.0.14 npm as malicious. It is considered malicious because: - T...

Malicious code in @fdp-tools/artifactory (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1bc272c51a6ad1997aaaa84623c7746d308a5e53386e01c6845e1b849c7ffa The OpenSSF Package Analysis project identified '@fdp-tools/artifactory' @ 0.0.10 npm as malicious. It is considered malicious because: - The...

Malicious code in protobufj-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ed062cce3f1c6c84bfdb6183ed9db3baafed65d7695929d1747b34a9dcdbba8 The OpenSSF Package Analysis project identified 'protobufj-cli' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @test3.svt/first-npm-package-test-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5d0ddb406420abe4a1e74b157a237b13abf8b3b0753309cc30b2d10ceb7de42 The OpenSSF Package Analysis project identified '@test3.svt/first-npm-package-test-2' @ 1.0.0 npm as malicious. It is considered malicious...

Malicious code in @test3.svt/first-npm-package-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c1c2ce1077d3778b7ed51e8d98f9ba6a9cd57e2be0c134fe9bda021d3a10248b The OpenSSF Package Analysis project identified '@test3.svt/first-npm-package-test' @ 1.0.1 npm as malicious. It is considered malicious because...

Malicious code in electron-release-clerk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62971b65e18446144c3987b2e748be1659667c56f764920e44ca8b98b516a62b The OpenSSF Package Analysis project identified 'electron-release-clerk' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in @b2bneo/components-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1d577f52f10cee6de3de2dee9eb8d3d70fb94c04b41f3dfb93794409066d6c8 The OpenSSF Package Analysis project identified '@b2bneo/components-tabs' @ 1.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in verida-tech-demos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ded9af82932dfcd9a6021dbd383ebadc322bdfc63b8c68d1981537b14ab226b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in nf-cl-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a07e531cde3becef826740710d90cfb37d46917ae9a633d794a641b4f04c737 The OpenSSF Package Analysis project identified 'nf-cl-logger' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in axp-product-ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5285fb9646b0435fb4ae3204b5975277243e149fc95c187c5c65e2fa0609389e The OpenSSF Package Analysis project identified 'axp-product-ducks' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in hedgedoc-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da3beadfe66abf674d7b17ba8619980aaa9f69e6bc510dbe8966e0a7c1902ab2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in world-id-sign-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4873832af5f4bd979a3e2a9acbbcb678f3801e41833eda8c895bdcedf7e1fb36 The OpenSSF Package Analysis project identified 'world-id-sign-in' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9047 Malicious code in world-id-sign-in (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4873832af5f4bd979a3e2a9acbbcb678f3801e41833eda8c895bdcedf7e1fb36 The OpenSSF Package Analysis project identified 'world-id-sign-in' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in arkose-vue2-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9008418a813522522804dfaf58f73128ae52ca85667b506962284ddbfc3141bf The OpenSSF Package Analysis project identified 'arkose-vue2-example' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...