Malicious code in dotnet-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b999fe97036e14a94f3d11e2d4723b2d5626225acb4f878809bbbd63e07fe3a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in minification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f79ed869c7c386d877f1fc9d9cd294ad5e2a35ec2c35b31f3acd8898b1de81d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @the-c-company/scope_packages (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 36ddd29067e6d60944a4f72e473733f61a21a1f7bd5c731b167d44236a178fbd The OpenSSF Package Analysis project identified '@the-c-company/scopepackages' @ 1.0.0 npm as malicious. It is considered malicious because: - T...

Malicious code in smp-imsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2c37b45dcf00d1c87e46d7fee96a0d5d5736d22bc0094618bea415a79bed4e The OpenSSF Package Analysis project identified 'smp-imsc' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in learning_npm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3b173b32e267c6a9b7455320bda81f08ce154ad6315aeaea540133a9f0ab232 The OpenSSF Package Analysis project identified 'learningnpm1' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in bce-service-bos-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 455254dc1b6facea5922040875102470c6bec34eb212c1966f2fda65f5e9277e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in eslint-config-b2b (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9498fe4fe7d76f71e291bf28290e9ed7f2e2d6aa1d0572ef9544e2a51eb87ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cap1-application (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5b8be093bde3967e8014195e003d06618727ecdc4b285008efd0ac95fd7c988 The OpenSSF Package Analysis project identified 'cap1-application' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in bc-carousel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3941632e7872e79a931f3a5f41f3fc042aab5864ebf162ea08ec70ebd5bc1d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in confidential-package-name (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22b6e399f6684509440f29b16a20c593cc1aee7a15e87f5263dfe847b6d7850a The OpenSSF Package Analysis project identified 'confidential-package-name' @ 99.9.9 npm as malicious. It is considered malicious because: - The...

Malicious code in dc-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5534b8254822e7e5f6e4ee2e6f748422783f8a2aebac5f16fca13c06af524468 The OpenSSF Package Analysis project identified 'dc-testing' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

AZL-49164 CVE-2024-43799 affecting package nodejs-nodemon 2.0.3-5

Send is a library for streaming files from the file system as a http response. Send passes untrusted user input to SendStream.redirect which executes untrusted code. This issue is patched in send 0.19.0...

Malicious code in video.min (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b2a0713372942343830cd53ad3ad5ffe4dcf7e827523510ef79e32b38f67db3 The OpenSSF Package Analysis project identified 'video.min' @ 1.0.22 npm as malicious. It is considered malicious because: - The package...

Malicious code in balvant-chavda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a4352948540614eef450d227df439f2f1c0d1da030df382e59831548767f473 The OpenSSF Package Analysis project identified 'balvant-chavda' @ 1.8.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in mobileye-8-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7b3a006f16102113625364a266a513016fe138d66a4008fc548e6df97c1a9a8 The OpenSSF Package Analysis project identified 'mobileye-8-connect' @ 7.7.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in ori-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b71bf5ca700406e224508f08266da2a443693d48eb216c3854de6be0d1451346 The OpenSSF Package Analysis project identified 'ori-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package executes o...

Malicious code in ori-gabriel-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80e4a738169f3040e2786d44f744d9646f6ae11d6b59e30d03c4edba106a7c2d The OpenSSF Package Analysis project identified 'ori-gabriel-test' @ 7.7.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in snacks-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a8a3330ca1864b23cbe8bbc0eb833f73409c288067d5d19632ac829de559932 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grpc-google-bigtable-v2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9640f0015404a6fff13b4e9bbb9e01d3d4f545a8ae8935dc95425a427c561576 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

Malicious code in vpro-dhhvc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 56f43c6522fd7a2abc67174033f767bb063ebcd28b01c047ea2bff8176b423f2 The OpenSSF Package Analysis project identified 'vpro-dhhvc' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...