Malicious code in chain00x_rce1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2d528fd659506ce3a370f146632641af04a4a41e0c1b4d0e148e48a2b57e8b40 The OpenSSF Package Analysis project identified 'chain00xrce1' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in html.sortable (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d97ce7d0b1b07925f0480d38a692ed6ef4d4954376f3dceb77610423f13f977d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in navigation-component-tco (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f783bdef910568f0931f880ce5329f8f4c71c869d64c8078374a3103dfe745e9 The OpenSSF Package Analysis project identified 'navigation-component-tco' @ 999.999.0 npm as malicious. It is considered malicious because: - T...

Malicious code in fc-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77f6035edb9c1d932bd670b4ecd252c5ad1d38ae3ff39f0f2d3e68ca68a1d99f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe337a39891907521b303615d75e614524a26835d707bd4a1ccf7f5c51a7886b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in javascript-appfabric-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f8b7cd0cdd29ede135536b1e9ca802d8bfd2343e149fb7fd4ff7de38a4d1813 The OpenSSF Package Analysis project identified 'javascript-appfabric-logger' @ 966.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in gd-company-updates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c1253df2e743d9b41ff76588069c9ee739cc67b4ca244e95405d4b949bcdfb2b The OpenSSF Package Analysis project identified 'gd-company-updates' @ 14.999.0 npm as malicious. It is considered malicious because: - The...

Malicious code in chartjs-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0694218023b99a066388095e0c9d8de4e8d09473cc88abac25165435e4a5d7d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coveo-101-commerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc0cdf6355009bbf0e2512408fb6f96d5c1febe666618b3aece404301afc171f The OpenSSF Package Analysis project identified 'coveo-101-commerce' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1085 Malicious code in @mddsfmsdflm/itemselector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 88f4e295b9c4b793c8ffbdc4077606b6d5b61c41ab83b85bda2b46680c678174 The OpenSSF Package Analysis project identified '@mddsfmsdflm/itemselector' @ 103.0.9 npm as malicious. It is considered malicious because: - Th...

Malicious code in cptalertbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 88c1f10ff1d7a9b89a479bd30b9548a7adc533c677f7913c88563b08e9d28814 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...

Malicious code in mintel-navigation (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 03a09fa2fc3578a5c0280069c7cd04c797a86836c205896be3dc0fb53c5b3353 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in mintel-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13b8e3e53b1d2298f3798c2348d1caa9ccbbf59e520e7f67897fe51f6d9591ba Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in mintel-react-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0a1835239b54b7888436777e7e123e588fdbf2fe1ca95d9162e6803d5027515e Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in test-op-solhint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f8f315fe20128ae26be541522255c4eeab47ec166f70e54ca5a2c6cb533ae67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in uurl-search-params (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4d4a4d5977377ebf7c79b1bcb7c824cb6f1bb64c2151b065d2e189c27638d15d The OpenSSF Package Analysis project identified 'uurl-search-params' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in pandasprox (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 09102fb6db10bc8a136ca7a902415e21c97a31cbf416c904a7efc49a10757320 The OpenSSF Package Analysis project identified 'pandasprox' @ 0.1.9 pypi as malicious. It is considered malicious because: - The package execut...

Malicious code in gkjzjh146 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2431c5b39467f95f9010ec4bdf29d10e4590cef754a0b41b3057c8a30551fe5 The OpenSSF Package Analysis project identified 'gkjzjh146' @ 1.3 pypi as malicious. It is considered malicious because: - The package executes...

Malicious code in maddy_test (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx edb288f616afccdf20ab32d24f5f0616b0b2b91bcdb3d8f0d8bd60e1adbe6b0a Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ghsa-malware...

Malicious code in hyrule-react-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3b82bec5139c178e3b425e5e458a9c7b248b17db5192cf6178702cbb26822dba The OpenSSF Package Analysis project identified 'hyrule-react-commons' @ 2.0.1 npm as malicious. It is considered malicious because: - The packa...