2048 matches found
Malicious code in @fdp-tools/snap (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4b98f26659e9761c555996041aa767d2fb71d33dd1310bfad77040f26390fd9 The OpenSSF Package Analysis project identified '@fdp-tools/snap' @ 0.0.10 npm as malicious. It is considered malicious because: - The package...
Malicious code in protobufj-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ed062cce3f1c6c84bfdb6183ed9db3baafed65d7695929d1747b34a9dcdbba8 The OpenSSF Package Analysis project identified 'protobufj-cli' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in @test3.svt/first-npm-package-test-2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5d0ddb406420abe4a1e74b157a237b13abf8b3b0753309cc30b2d10ceb7de42 The OpenSSF Package Analysis project identified '@test3.svt/first-npm-package-test-2' @ 1.0.0 npm as malicious. It is considered malicious...
Malicious code in @test3.svt/first-npm-package-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c1c2ce1077d3778b7ed51e8d98f9ba6a9cd57e2be0c134fe9bda021d3a10248b The OpenSSF Package Analysis project identified '@test3.svt/first-npm-package-test' @ 1.0.1 npm as malicious. It is considered malicious because...
Malicious code in electron-release-clerk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62971b65e18446144c3987b2e748be1659667c56f764920e44ca8b98b516a62b The OpenSSF Package Analysis project identified 'electron-release-clerk' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
Malicious code in @b2bneo/components-tabs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1d577f52f10cee6de3de2dee9eb8d3d70fb94c04b41f3dfb93794409066d6c8 The OpenSSF Package Analysis project identified '@b2bneo/components-tabs' @ 1.3.0 npm as malicious. It is considered malicious because: - The...
Malicious code in verida-tech-demos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ded9af82932dfcd9a6021dbd383ebadc322bdfc63b8c68d1981537b14ab226b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in algoliasearch-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in nf-cl-logger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a07e531cde3becef826740710d90cfb37d46917ae9a633d794a641b4f04c737 The OpenSSF Package Analysis project identified 'nf-cl-logger' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in axp-product-ducks (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5285fb9646b0435fb4ae3204b5975277243e149fc95c187c5c65e2fa0609389e The OpenSSF Package Analysis project identified 'axp-product-ducks' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in hedgedoc-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware da3beadfe66abf674d7b17ba8619980aaa9f69e6bc510dbe8966e0a7c1902ab2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in world-id-sign-in (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4873832af5f4bd979a3e2a9acbbcb678f3801e41833eda8c895bdcedf7e1fb36 The OpenSSF Package Analysis project identified 'world-id-sign-in' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9047 Malicious code in world-id-sign-in (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4873832af5f4bd979a3e2a9acbbcb678f3801e41833eda8c895bdcedf7e1fb36 The OpenSSF Package Analysis project identified 'world-id-sign-in' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...
Malicious code in arkose-vue2-example (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9008418a813522522804dfaf58f73128ae52ca85667b506962284ddbfc3141bf The OpenSSF Package Analysis project identified 'arkose-vue2-example' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...
Malicious code in evolve-base-assets (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909d9bfde96cc057e1103d65d9b672ee44b67faf28bb4f4fb8fcbfd7877903d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in djangopeopletest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6617a6a6229b2e0ec3df4bda1a00109bdbc7aaff20d0fb0c305a489c9425734 The OpenSSF Package Analysis project identified 'djangopeopletest' @ 2.1.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in dx-hotels-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 757cbf55b30ccb4cbbf7c26afbc8eb1493280155f0ae8578700044d07a611f5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @gintel/personal-assistant (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceacaddd98b873d32e3e6aa49bd9d48f964eca12ffe724a93abeee1ca81004db The OpenSSF Package Analysis project identified '@gintel/personal-assistant' @ 0.180.0 npm as malicious. It is considered malicious because: - T...
Malicious code in @kp-admin/main (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5dc03ae8edb86b5c5bd3968c80bda004a2d31b59095717c3ca8d4f6c1a9a553 The OpenSSF Package Analysis project identified '@kp-admin/main' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in c2-object-storage (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1470f00dfffc6e734913635819fbb158d4a5b044a9bcfddab4891b631dcb8000 The OpenSSF Package Analysis project identified 'c2-object-storage' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...