Malicious code in cli-pkg-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a7aae8c7f3c482a70cb9cd90ee7c66cdab49f87aea5f39075c02aef180ad54a The OpenSSF Package Analysis project identified 'cli-pkg-test' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in starter-assets-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba07492e2a8db9d81d2c52ee32e66ed5f4432091392b4e957b6974329bce90d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in protect-and-track (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis edbed776bce4e13aa762ef261200997d2a94599f0c21be5b9bd765f20e83acf8 The OpenSSF Package Analysis project identified 'protect-and-track' @ 1.9.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in operaextensions.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b9207a219bcb0da9f09f2b9c49edc832107607c624e5d9b3daa16b4c7fdf3d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mozilla-central (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6bee454a894c37c1ab6f11580801deac1455d7114675e371cdec10ed8966f562 The OpenSSF Package Analysis project identified 'mozilla-central' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in lookerbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e153a83a07ee715f03496c2ce264b146ef89b95765fd90c48d01a49b7fa732c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in example-arc-server-request-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f47e48a4969642e3e6ab7d39b5d8f25a7a6d7acf2bbeec054888cfeada839219 The OpenSSF Package Analysis project identified 'example-arc-server-request-local' @ 100.0.1 npm as malicious. It is considered malicious becaus...

Malicious code in azure-rest-api-specs-eng-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 34ba9e800ce9823b7e1b4b90d47a87eafdfb783d616caa8a69bf93f55ee0a9b5 The OpenSSF Package Analysis project identified 'azure-rest-api-specs-eng-tools' @ 1.0.1 npm as malicious. It is considered malicious because: -...

Malicious code in webquickauth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e838cec17c1006b567e2a70f9554fd2a040c9fb0cfdf8d753e81548c1ea02c49 The OpenSSF Package Analysis project identified 'webquickauth' @ 2.3.5 pypi as malicious. It is considered malicious because: - The package...

Malicious code in wordpress-theme-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11ba6949abd5e27add3ceeb9c4709ae17be63d4831af09c7f34ca236d3b06b8e The OpenSSF Package Analysis project identified 'wordpress-theme-core' @ 0.0.123 npm as malicious. It is considered malicious because: - The...

Malicious code in comet-chat-react-ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a6f38c4d9dd2413e237c8d146d5fcf11d04f613910b552a32a52b3e4cf199f6 The OpenSSF Package Analysis project identified 'comet-chat-react-ui-kit' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in draconianspeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1212e40bb57fce7672f50431153645b13624cc1e2061b44c0b91fec275e7853 The OpenSSF Package Analysis project identified 'draconianspeed' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in delta0231 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7df399fa1580fb8e64d7cd2481b0212f607aa8146a1b904b83a7af05ebb8031b The OpenSSF Package Analysis project identified 'delta0231' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in commando333333 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3da17f518475bb94d3d0740d0e1fc486dcce1f4fd1c8f86b9578176c4ea04a03 The OpenSSF Package Analysis project identified 'commando333333' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in dc-test1-asdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04026ef40e4abce9afd70341d1bbb7d8907a917e7a6bd0fd6b7ffb15623a30c0 The OpenSSF Package Analysis project identified 'dc-test1-asdf' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in importlib-metadate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b6db8994d6a78a5d0d95df2d0add2257ee6188f8c5419cbd7e2813426739d15d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: baidu-readver Reasons based on the campaign: - The package...

Malicious code in nt4padyp3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ccc059efb56cb7ca8b8c413c9b0711b900e5b98d371c30e58b3a5056f5c06d18 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: baidu-readver Reasons based on the campaign: - The package...

Malicious code in @cart-ui/core-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 89568273084fef75464b1c975014417bf122a818685035e43012bb1ff5c3ba33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in leocare-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 311899bcdd83d3cd308268641290fc8fd0f503d308fc1bbf7488b5f0fab734cb The OpenSSF Package Analysis project identified 'leocare-new' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in cvsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1dca03039860936ed84ad166255f648867de3e96266b00da0234c232f24f16a The OpenSSF Package Analysis project identified 'cvsr' @ 2.2.1 npm as malicious. It is considered malicious because: - The package communicates...