Malicious code in auto-assign-team-actionn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84658b8c37896aa0e8c456f986500c73ce8af5a8e7696decc2db2a6fb7b450d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

Malicious code in focal-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a810e0097be46a2d0ef76ac3c6aa2088c3467e69485c408f22014bc66dd07530 The OpenSSF Package Analysis project identified 'focal-examples' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in anargha-manu2324 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5d8b88223767d58cf126c0232a9c2106316053505e2b4d4fdefe17848c1b3561 The OpenSSF Package Analysis project identified 'anargha-manu2324' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in haefgerasgrae (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c51eb8de5b4c76701af20deeb703ba85374c2036c17fd5bcd09b7b0233c6ae34 The OpenSSF Package Analysis project identified 'haefgerasgrae' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in pai-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b6dc3e380e435ff7d74a44ec8841c1577a1bd74c03ef3dc368e2514e485d8fc The OpenSSF Package Analysis project identified 'pai-web-components' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

Malicious code in tsanjint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51bc4162c9661fcf380821e0b575282ec5c1e6d7a6732cc427c637a581d909e1 The OpenSSF Package Analysis project identified 'tsanjint' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes...

Malicious code in @saferpay/eslint-config-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49038c65a69ff50fde7f32068fe7d4705c0ff7424bd0e86e6f87ab5593a99949 The OpenSSF Package Analysis project identified '@saferpay/eslint-config-base' @ 5.9.2 npm as malicious. It is considered malicious because: - T...

Malicious code in @saferpay/eslint-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1623fcac8f83c2a752fa07e95cf1391d1f31dd3b8f757f4dbf3e3c170eb7d88d The OpenSSF Package Analysis project identified '@saferpay/eslint-config-react' @ 5.9.2 npm as malicious. It is considered malicious because: -...

Malicious code in @saferpay/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a2d3c2e7f9c105a15779b795e9c5e4108f8e8ada94f9d6af1446e4b0e19fbd3 The OpenSSF Package Analysis project identified '@saferpay/components' @ 5.9.2 npm as malicious. It is considered malicious because: - The packa...

Malicious code in @saferpay/react-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf4cc2b21097670e4c1c216967552f761f10ded3eb65a4a4b705aa0a5d6943e6 The OpenSSF Package Analysis project identified '@saferpay/react-library' @ 5.9.2 npm as malicious. It is considered malicious because: - The...

MAL-2024-11878 Malicious code in spacexstats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3d5802346cd5966361f229a602839453998b6251e428ec6638141f6fcdb3c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the UPDATES_ExtractFile function in the Visteon Infotainment automotive application platform allows a hacker to execute arbitrary code.

The vulnerability of the UPDATESExtractFile function in Visteon Infotainment’s automotive application platform exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability allows an attacker to execute arbitrary code in the basic operating system...

Malicious code in solhint-plugin-openzeppelin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f4a4cea0f7210535e002b329fb3bd7a547d17cac3f0db1831009855d61000a0a The OpenSSF Package Analysis project identified 'solhint-plugin-openzeppelin' @ 99.99.99 npm as malicious. It is considered malicious because: -...

Malicious code in uchiwa-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93c81ac91a1060b8f7257839e951572af3ef296d5fecede6f6e9bf69bca76d25 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in openai-realtime-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mattermost-cloudnative-bootstrapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 214848c247a651fda2867e7d1f8caa5843eb4c89463a1313c6b987cd1c0f73e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rarible-program-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ebfe242bd7c35911f61115ae2c00d485a5bb93b81ddf36f6f40af24fb1cd977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simulation_service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf6c7d5222c0cf39b74d1359864f3ae93cef37354056d3bed6b1d95df61d66a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in testin-elengo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 594a2ba539dc07c62c9e4e9310e88baf659a54029490fd15312eaba8cc279e00 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...