MAL-2024-12113 Malicious code in testforyt7hb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ffea609123713e81da0d17141ca37dca97eaa7848afcbf299d969e5108ce7e2 The OpenSSF Package Analysis project identified 'testforyt7hb' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11918 Malicious code in auto-assign-team-actionn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84658b8c37896aa0e8c456f986500c73ce8af5a8e7696decc2db2a6fb7b450d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11883 Malicious code in microsoft.applicationinsights.windowsapps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52a55ac73cfe94f23310de107d74ba82bfa2e8ae17f9742af50ef4e2da42c98d The OpenSSF Package Analysis project identified 'microsoft.applicationinsights.windowsapps' @ 99.99.99 npm as malicious. It is considered...

MAL-2024-11818 Malicious code in auth0-lock-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc8cb7c85f580c66397adec583bbd6623eafcb98683fcf6299ca73188892009f The OpenSSF Package Analysis project identified 'auth0-lock-webpack' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11782 Malicious code in @fandom-frontend/react-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e9a17e9a163a67c876d4a9937c41e8711d220ae05d890281acec9edbf9986cf The OpenSSF Package Analysis project identified '@fandom-frontend/react-common' @ 100.100.106 npm as malicious. It is considered malicious...

MAL-2024-11229 Malicious code in calendervue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7c8db5b1dc0e0d6925e52ee6e73b12edcd51a073f88c65b625ceffe357bd6cf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7089 Malicious code in cra-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e49ccaa79a7296b7f1237beb3210cabf6610aab5c68e2c349b1fff4d3b2bb332 The OpenSSF Package Analysis project identified 'cra-docs' @ 7.999.45 npm as malicious. It is considered malicious because: - The package...

Malicious code in sparklog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa3ac41199a392a32d649e60da4ff9d98d6ceb0d956297d976ce3b5dc948dc91 The OpenSSF Package Analysis project identified 'sparklog' @ 0.0.3 pypi as malicious. It is considered malicious because: - The package executes...