Malicious code in dagger-core (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 0d58316229ef10836cd767174ee076e5fc92d8e4cf13f52b4b4950853503434a The OpenSSF Package Analysis project identified 'dagger-core' @ 13.8.9 npm as malicious. It is considered malicious because: -...

Malicious code in d3-pprof (npm)

Source: ossf-package-analysis cb125a721a5edc27b63a6a6213519acc4963b68002982f743a2bd51498852979 The OpenSSF Package Analysis project identified 'd3-pprof' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - Th...

Malicious code in cvsr (npm)

Source: ossf-package-analysis b1dca03039860936ed84ad166255f648867de3e96266b00da0234c232f24f16a The OpenSSF Package Analysis project identified 'cvsr' @ 2.2.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The...

Malicious code in compiler-wasm-lib (npm)

Source: ossf-package-analysis 2c3e3404f77486c9124e70890333cce19382125d07dac40b2ed4b87a466c855e The OpenSSF Package Analysis project identified 'compiler-wasm-lib' @ 4.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in company_package_my (npm)

Source: ossf-package-analysis 3f3e6351419385dd63eeaa9bdd36d22be97aa05d213effc8f93ef580e76e7226 The OpenSSF Package Analysis project identified 'companypackagemy' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in commonweb-setup (npm)

Source: ossf-package-analysis 0c019e3086bf1cec9b859c8fe048187fc7cf6dc866de93fbd0ff2182b3e4fc0a The OpenSSF Package Analysis project identified 'commonweb-setup' @ 10.11.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in commando333333 (npm)

Source: ossf-package-analysis 3da17f518475bb94d3d0740d0e1fc486dcce1f4fd1c8f86b9578176c4ea04a03 The OpenSSF Package Analysis project identified 'commando333333' @ 10.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activit...

Malicious code in com.db.spain.common.fif.ngx-fusion-ufe (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 30f0038c395e91d1add11ecd9f7f4784ac0fdf7c472e6ca9003c3d69ae35e031 The OpenSSF Package Analysis project identified 'com.db.spain.common.fif.ngx-fusion-ufe' @ 2.2.8 npm as malicious. It is...

Malicious code in com.immutable.unitysdk (npm)

Source: ossf-package-analysis 5169fcc0ce37e587c7680742027ad143ea18826d2290cbe5a8c9bdb69095fef0 The OpenSSF Package Analysis project identified 'com.immutable.unitysdk' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in code-debug-codes (npm)

Source: ossf-package-analysis c78c334cc38295767013c4a8b7bd904fd09069e4b7f938183d8c247eefb27bec The OpenSSF Package Analysis project identified 'code-debug-codes' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in client-onboarding (npm)

Source: ossf-package-analysis 762eda8c988435ad6b160c429812de5a603401f5a6463f37bb48160ba53305b6 The OpenSSF Package Analysis project identified 'client-onboarding' @ 7.7.7 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in chain00xtest2 (npm)

Source: ossf-package-analysis 80e4a9d4552592ce0f6795c5766700fad9ffb00693e9e153665354e7f4286917 The OpenSSF Package Analysis project identified 'chain00xtest2' @ 1.0.2 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious...

Malicious code in chain00x_tsrc (npm)

Source: ossf-package-analysis 5926bd93f4ff900c16d517fa3e4dc243e5a29e79d3fb377b8304df57ab6d347e The OpenSSF Package Analysis project identified 'chain00xtsrc' @ 1.0.5 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavio...

Malicious code in chain00x_rce1 (npm)

Source: ossf-package-analysis 2d528fd659506ce3a370f146632641af04a4a41e0c1b4d0e148e48a2b57e8b40 The OpenSSF Package Analysis project identified 'chain00xrce1' @ 1.0.1 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with malicious behavio...

Malicious code in cds-banking-prd-viewer (npm)

Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in baidu-oscp (npm)

Source: amazon-inspector 1707ecb3311268a4753a44190db82280e80d16015e5474475863a3e1487aa5c0 The package baidu-oscp was found to contain malicious code. Source: ossf-package-analysis 2758b8fdfed8e0df61c234bf9c6956c5f9970adf98784ba56d0b222b1f8da1a8 The OpenSSF Package Analysis project identified...

Malicious code in azure-rest-api-specs-eng-tools (npm)

Source: ossf-package-analysis 34ba9e800ce9823b7e1b4b90d47a87eafdfb783d616caa8a69bf93f55ee0a9b5 The OpenSSF Package Analysis project identified 'azure-rest-api-specs-eng-tools' @ 1.0.1 npm as malicious. It is considered malicious because: - The package executes one or more commands associated with...

Malicious code in axis-ui-generator (npm)

Source: amazon-inspector 898e7e6953d0a1f5efd906c36d9a6c798f0dce58017ac54df6e1b09bd26dd6d1 The package axis-ui-generator was found to contain malicious code. Source: ossf-package-analysis 8dd0e22e38cddd89db2b0a8274d26b4177221b32399c277a344d98fa261aaeb5 The OpenSSF Package Analysis project identifi...

Malicious code in attributors (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis dbefeaf34d3565832f706ae95a143747b2d0ff0a593532a3b8088020fd11bc1d The OpenSSF Package Analysis project identified 'attributors' @ 99.99.2 npm as malicious. It is considered malicious because: -...

Malicious code in atlas-query-editor (npm)

Source: ossf-package-analysis c6c37cad26e052e458501d412ce970fc2faf0d3ce12d6e7b5794e6161ab7e4d8 The OpenSSF Package Analysis project identified 'atlas-query-editor' @ 99.99.99 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...