Malicious code in examples-formic (npm)

Source: ossf-package-analysis 074e879e97761583a22531a3d4f917977ac387e40c36bc5eb35e3f4b367db196 The OpenSSF Package Analysis project identified 'examples-formic' @ 100.0.2 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

Malicious code in example-marko-webpack (npm)

Source: ossf-package-analysis 553d816403e5dd786bafbe39f79c521cc2e5bd1917b425aefd7d5f34c96400b6 The OpenSSF Package Analysis project identified 'example-marko-webpack' @ 100.0.2 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with...

Malicious code in example-arc-server (npm)

Source: ossf-package-analysis 313fe2f7f49471a9351eff38bafe5bf3968444661867230198924b55a3e94909 The OpenSSF Package Analysis project identified 'example-arc-server' @ 100.0.2 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

Malicious code in euf-ele-hf (npm)

Source: ossf-package-analysis a7cfc361d149da8b9d35ea0df759689a516eed93545d9966146e4652bc08aa2a The OpenSSF Package Analysis project identified 'euf-ele-hf' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. -...

Malicious code in etsyapp (npm)

Source: amazon-inspector 4d3ba88687c2454c8371f948d388d1aa11c628cc010daeee014c9dd60ad1c193 The package etsyapp was found to contain malicious code. Source: ossf-package-analysis 919ce430631b9f294e4f67032799f5df86d6c943a20c330407641916d7aab63d The OpenSSF Package Analysis project identified 'etsyap...

Malicious code in eslint-plugin-i18n-scan (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 24f25e113ba45d8c8835196aef1b368f2a1e4fb1aecdc17e3a6d47db15371e04 The OpenSSF Package Analysis project identified 'eslint-plugin-i18n-scan' @ 11.0.5 npm as malicious. It is considered malicious...

Malicious code in enclose-eslint (npm)

Source: amazon-inspector 6f7fc1a375a04989c1b52036b89fefe7fbba475b3fe7ec9917335cfe3a9746bc The package enclose-eslint was found to contain malicious code. Source: ossf-package-analysis 9e0be37b60a02ac1ede967e7e3db110f924fa0e3b578e286968a17cad31a3534 The OpenSSF Package Analysis project identified...

Malicious code in emburse (npm)

Source: ossf-package-analysis a7f9320f062955ad648d35fec70489fe435e61acd5645c8b8dc6faf8e0c99ede The OpenSSF Package Analysis project identified 'emburse' @ 1.0.2 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The...

Malicious code in elf-stats-nutmeg-stockpile-999 (npm)

Source: amazon-inspector d3dc7edeef3a237ea7dca726f170bdbe2e150c7818ba80f23c7d3ba8f7337906 The package elf-stats-nutmeg-stockpile-999 was found to contain malicious code. Source: ossf-package-analysis 8822a2e46635ec55aa07e8237606984fbc1b1fed504af23fcb935dda5e76c41d The OpenSSF Package Analysis...

Malicious code in elf-stats-mulled-bauble-252 (npm)

Source: amazon-inspector b496322bb576fe2d9c78c8c2982cbbea3a84587c945d2f580c242e2256b0ef69 The package elf-stats-mulled-bauble-252 was found to contain malicious code. Source: ossf-package-analysis 1b0585942badec01b5f22da84d32ae2646197d58588e73b85385f4ba7f480e24 The OpenSSF Package Analysis projec...

Malicious code in elf-stats-ginger-reindeer-411 (npm)

Source: amazon-inspector e84f894c73cc87f3c17783b05c4325ebd5d6196490e100c45ff938bf075fd861 The package elf-stats-ginger-reindeer-411 was found to contain malicious code. Source: ossf-package-analysis 5ec87318cd6f874f08eb6015b33602d14aa7ecbaeadd01d7d21e45ac8a17d399 The OpenSSF Package Analysis...

Malicious code in agentrc-security-poc-policy (npm)

Source: ossf-package-analysis e0bbc2bd28895453e58312011f52db595086e60412006e8732bf2ffb60284c9c The OpenSSF Package Analysis project identified 'agentrc-security-poc-policy' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with...

Malicious code in dva-loading-show-rce (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 2779c32d64a46ff3b8b9de62cd9161c7b6e0071c4a3103b2a37e949f374467a0 The OpenSSF Package Analysis project identified 'dva-loading-show-rce' @ 1.0.0 npm as malicious. It is considered malicious...

Malicious code in dragonsense-config (npm)

Source: ossf-package-analysis b16039afbf251f78d8c6adf4bb07342e8c112167bef9e0749651dacbdaf12c26 The OpenSSF Package Analysis project identified 'dragonsense-config' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

Malicious code in discorddevsimple (npm)

Source: ossf-package-analysis c94692a960f7da37c31ff3b9d9c44355a82ffd07bc746bc46afb5b5877b0e1f8 The OpenSSF Package Analysis project identified 'discorddevsimple' @ 3.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in devops-challenge (npm)

Source: ossf-package-analysis ae82cf2333c3027eb9266e05dfa4697724ae1623e3b662c2b129d5f716f55aa4 The OpenSSF Package Analysis project identified 'devops-challenge' @ 99.99.990 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in depconfusioncheckdontuse (npm)

Source: ossf-package-analysis 418af2d7f71a71a583c43b84d18214ede68763f87513cb692962a4567ff24cdb The OpenSSF Package Analysis project identified 'depconfusioncheckdontuse' @ 1.2.1 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with...

Malicious code in demo-51200 (npm)

Source: ossf-package-analysis c93692ca1e6a2de0d48dbba668f2ba80baf930a19fe3b9273195f6528e77d406 The OpenSSF Package Analysis project identified 'demo-51200' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavior...

Malicious code in ded-ps-events-ded-ps-events-core (npm)

Source: amazon-inspector 38b1237ac35f64b35ae902019d79b84aeb8eacafc07339fcbca0de866dc6b797 index.js unconditionally requires./setup.js on load. setup.js assembles hostnames at runtime via Array.join"" to hide them from static scanners, resolving to four Cloudflare Workers endpoints...

Malicious code in dc-test1-asdf (npm)

Source: ossf-package-analysis 04026ef40e4abce9afd70341d1bbb7d8907a917e7a6bd0fd6b7ffb15623a30c0 The OpenSSF Package Analysis project identified 'dc-test1-asdf' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity....