2158 matches found
Malicious code in lol-huy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 762379a17b4068ddffc2ae82540c61d7e765f81b580f0cddfb5b895b974f1e2a The OpenSSF Package Analysis project identified 'lol-huy' @ 11230000951.0.8 npm as malicious. It is considered malicious because: - The package...
Malicious code in @dh-io-globalelem/footnote-reference-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2e6d7cc2b325220bbda28fea49385ce4c68d05c1646bc6a569ca62a0f27c443 The OpenSSF Package Analysis project identified '@dh-io-globalelem/footnote-reference-component' @ 5.990.10 npm as malicious. It is considered...
Malicious code in en-calendar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cc66d6eb2f773deb786b69bc29863caf4091bd2bd1f9fe0b7fdaa6fe14aca89 The OpenSSF Package Analysis project identified 'en-calendar' @ 1.0.1 npm as malicious. It is considered malicious because: - The package execut...
Malicious code in prism-commercial-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 022a3875aaf0406fa69c720352856a350f48f0b350caf1e5bb66717663d7a078 The OpenSSF Package Analysis project identified 'prism-commercial-ui' @ 100.100.100 npm as malicious. It is considered malicious because: - The...
Malicious code in @ssr-frontend/packages-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17a895de36109204be95b9aba4154cc6414897889ce21aed3bfa4f0a304b3453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jera (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb23042fd58a78e938674a631ab67c9e3f5df50007c0ae2088da7c6da59e9805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in identity-auth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 172d924c44b4cff292645cf014382ea4d780ad62b2d7550d53d4825c83ac271f The OpenSSF Package Analysis project identified 'identity-auth' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in moblig-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a9601f46c6924bb210289c184590485d4dabf6696dc6c0da5720465002bcf06 The OpenSSF Package Analysis project identified 'moblig-npm' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...
Malicious code in samsungads-publisher-portal-authorizer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bdf69166b497f7cd30a51ffff97b600796cbf77f8a34ead71e7ed700f40dfc7 The OpenSSF Package Analysis project identified 'samsungads-publisher-portal-authorizer' @ 99999.999.0 npm as malicious. It is considered...
Malicious code in browser-spoof (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 163b0aa2d0d3439a25800f6f383fbe268a69753591f918b10475d357d4e4a533 The OpenSSF Package Analysis project identified 'browser-spoof' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in cagov-template-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6 The OpenSSF Package Analysis project identified 'cagov-template-v5' @ 19.2.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-138 Malicious code in cagov-template-v5 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6 The OpenSSF Package Analysis project identified 'cagov-template-v5' @ 19.2.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in newbooking (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c36258c896dcadd103fd2263e6d19e4ae885350c438c2efc971e816f7d39215d The OpenSSF Package Analysis project identified 'newbooking' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in @neogov/linkanx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 133eddd55383f57d0ee29c0a3eb7343b9118e95d6c54ab71bb75aa457dd5d2d0 The OpenSSF Package Analysis project identified '@neogov/linkanx' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in internal-test-devoxx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb92a072265a550a5ce1cc1d16f096b636845bc8edabaf60bddfebad43c423bd The OpenSSF Package Analysis project identified 'internal-test-devoxx' @ 0.0.4 npm as malicious. It is considered malicious because: - The packa...
Malicious code in j5-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eac2e249ebbccb3255a8760bd35b3e6fd100192fe0801b54e53231a71a0789a1 The OpenSSF Package Analysis project identified 'j5-test' @ 1.0.1 npm as malicious. It is considered malicious because: - The package executes o...
Malicious code in holamessironaldo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4cf4c0a7f778816c700f59e8c286e22f3be855d4eb810b280ddc301ce4c190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @cartus-core/cartus-common-ui2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dda6d81204f2c556310cb11a7875e4f74aff47c159c093a77d424c32911db2e6 The OpenSSF Package Analysis project identified '@cartus-core/cartus-common-ui2' @ 11230000951.0.6 npm as malicious. It is considered malicious...
Malicious code in sparxy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9c525477f636a7370201288e33ac0e0c31a9fd3d2919fb8d165092fcf367942 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in tsrcrcetest1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81236969e1e7e6ddfdffe293e1d918b357ce193fc362e722a7b75bce480e1bbb The OpenSSF Package Analysis project identified 'tsrcrcetest1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...