Malicious code in uidm-react-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 46d06a0532602d59ada5b5296d3344ff79c9be233ff036127aad80ba624e6e95 The OpenSSF Package Analysis project identified 'uidm-react-lib' @ 99.99.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in epc-notification-setting-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e2f6eb6b2d571a457c452301694f5e1f6da8ff1254c78f6837eaef6af78134e The OpenSSF Package Analysis project identified 'epc-notification-setting-web' @ 66.6.9 npm as malicious. It is considered malicious because: -...

Malicious code in scundev-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6b38dd087840ac0c2e03a22124c4b5eead12b96f0cc99579a07a8164172c516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in not-exist-lykos-poc2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9fdf307a333300d88cdb5031c5f135a2fe51e2a01d4db763c2d1457111ce9fe4 The OpenSSF Package Analysis project identified 'not-exist-lykos-poc2' @ 66.6.9 npm as malicious. It is considered malicious because: - The...

Malicious code in ui-common-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...

Malicious code in cz-ifood-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65b5439bd3051d2315be6f4ae90f3235c5e41c2d9afa4a3c8f6ff3271c31cb9a The OpenSSF Package Analysis project identified 'cz-ifood-conventional-changelog' @ 1.0.101 npm as malicious. It is considered malicious because...

Malicious code in f3ngtest12345677 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c45841bc7c5a73373ee4764c017a128bb5dd286d34d5d4a2bf649338aa1644a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in lyft-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fa096ec56c6910a67c11cdb8b7ebb3bede054bf1ea7eb926fff07e2265c00dc The OpenSSF Package Analysis project identified 'lyft-core' @ 999.3.9 pypi as malicious. It is considered malicious because: - The package...

Backdoor.Win32.Agent.ju (PSYRAT) MVID-2024-0677 Bypass / Command Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/0e6e40aad3e8d46e3c0c26ccc6ab94b3.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.ju PSYRAT Vulnerability: Authentication Bypass RCE Family: PSYRAT Typ...

Malicious code in iotnet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bfce2833c5b3ba2b663b55cd3c22624573a6d5face271696869b0a3c779910ee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in poptoken-builder-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e47c000bd16e968d0cf79cedeb817099f703aeaa335771981d0c5a9f43982b73 The OpenSSF Package Analysis project identified 'poptoken-builder-node' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in fe-bitmovin-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb423933317049482de1eccf90e5786861fc4d50647ce5fa521c0aeb7a164d25 The OpenSSF Package Analysis project identified 'fe-bitmovin-player' @ 99.3.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in optus-sport-ctv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e77d4e5b4d39f3120c7742b9d7a7e79b69f2d5a5ed122b1f57add9d3564a752 The OpenSSF Package Analysis project identified 'optus-sport-ctv' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in sparklog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa3ac41199a392a32d649e60da4ff9d98d6ceb0d956297d976ce3b5dc948dc91 The OpenSSF Package Analysis project identified 'sparklog' @ 0.0.3 pypi as malicious. It is considered malicious because: - The package executes...

Malicious code in types-for-adobe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 927dcbc233169c84ab7ef0e97232782f6bb821d476409cc6ccc8587995dabdc8 The OpenSSF Package Analysis project identified 'types-for-adobe' @ 99.3.9 pypi as malicious. It is considered malicious because: - The package...

Malicious code in programmablesearchengine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e202ed286f9758737c48d4cf1c30f0ece100c6433edd1076e9548baa6a2373d6 The OpenSSF Package Analysis project identified 'programmablesearchengine' @ 99.2.0 npm as malicious. It is considered malicious because: - The...

Malicious code in region-optimizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 257c0698203a7d5e178b36eb11760380fab35761c1c54cf601b5f404f170eb8e The OpenSSF Package Analysis project identified 'region-optimizer' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in teslamotors-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff47ce37cbaa6b68373ed17ef85fe4403bf2b4865e9ef971a397714d2f7b8cce The OpenSSF Package Analysis project identified 'teslamotors-server' @ 99.2.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in mytmobile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 676558f1795470bc642910cfcb649425633481aa4c72864aa4354baa183ee115 The OpenSSF Package Analysis project identified 'mytmobile' @ 99.2.0 npm as malicious. It is considered malicious because: - The package...