Malicious code in rcetest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ee58b9e6d758cb339bd2d6605b131d84f7829a9299889967e3f5ca31d69d120 The OpenSSF Package Analysis project identified 'rcetest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes o...

Malicious code in chain00x_rce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3f3656f34947ab9c7e747961055e3697ca5d51e275e42ca7fae5ab01f1c2e7ef The OpenSSF Package Analysis project identified 'chain00xrce' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in biscits (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68cd2f1bb198e032dc091d1cca16fb8e548fca53bcacbd76cf231ea7fd569b69 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in multicolored (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89f0e1660e4708cd5f0568f9c85ea2f35f883c21cb0f6a7d37e4d9d25a1dc8c8 The OpenSSF Package Analysis project identified 'multicolored' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...

Malicious code in vibrant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aaa7491953b666535f724cc8b060802509b09ef8e13b4f3c5ebaa6a0554e4c17 The OpenSSF Package Analysis project identified 'vibrant' @ 1.0.0 pypi as malicious. It is considered malicious because: - The package...

Malicious code in newpackagetest2027 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7c1e4acddbaeafd87b1cce82ddc1025a3e5abd4c285a2fd2e7fcff07d37d500e Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

MAL-2023-8768 Malicious code in newpackagetest2028 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f8a309179fb8daa3b3ff1d8a250fe566f5d138ab913e435928491185de07f1c Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

Malicious code in newpackagetest2026 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b2facdf5925f09b064136d0c919a80e0e83d0a13b4b6f9d903162352c586dc9 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

Malicious code in flow-session-guard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98ef7d6ade8e634b82bd1d79345489c30800a8b1078467e02c1bd113b1ce0f16 The OpenSSF Package Analysis project identified 'flow-session-guard' @ 99.99.993 npm as malicious. It is considered malicious because: - The...

MAL-2023-8713 Malicious code in @diil-front/chip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74f3f685f9f7080b81701a037923a9621b51fbafb68a17e12d9ceffd47981a0a The OpenSSF Package Analysis project identified '@diil-front/chip' @ 99.99.99 npm as malicious. It is considered malicious because: - The packag...

Malicious code in fio-registrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d3cbe7451892cf4f9774a6bcb3341066aae53b0ebf3ac6ced5edf7cb86dee6b3 The OpenSSF Package Analysis project identified 'fio-registrations' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8701 Malicious code in fio-registrations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d3cbe7451892cf4f9774a6bcb3341066aae53b0ebf3ac6ced5edf7cb86dee6b3 The OpenSSF Package Analysis project identified 'fio-registrations' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in twk-boilerplate-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e55b9fb271d1d1fcc3ac27783bc95ed7cbce8762d35cd7f2635490e25b9263b The OpenSSF Package Analysis project identified 'twk-boilerplate-template' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in @dle-multiform-angular-component/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 820657ccb39c885de6a5d6006ee75064ffa46699e8af105375b12a67436649fc The OpenSSF Package Analysis project identified '@dle-multiform-angular-component/core' @ 13.0.1 npm as malicious. It is considered malicious...

Malicious code in @huby/infovist-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a9d9af98833f94e0e3d73a4dc90f662b96da4620bdbacdc5121e08983b066b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in pdf2htmlex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7fdad8330a64af4a946fe1ba37ed64c71c1185fa07ff7dba06646f64fc0cc26 The OpenSSF Package Analysis project identified 'pdf2htmlex' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in lc-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d918d66169ac2696569bb389d82b0b95640986fdc77ab8cec9639908d156d0c5 The OpenSSF Package Analysis project identified 'lc-config' @ 5.5.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

Malicious code in moonpig (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3bf064eedf0d80bc14ce31e1deee2fd824472437a9fa79fb15602d6b09c478d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...