5 matches found
Malicious code in knowledge-processor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 10486375c2c8f9c47bdb66e84e96db62dd623c210713201b53ebd516834bf3e6 The OpenSSF Package Analysis project identified 'knowledge-processor' @ 99.0.9 npm as malicious. It is considered malicious because: - The packa...
MAL-2025-2219 Malicious code in sendbird-chat-sample-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ed64b926ca67eeb78b98e8ba6fdaec0bc57f79fc486f9d178d69da4b0b92f7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-732 Malicious code in elabasia-mobileapp-react-native-ui (npm)
The package executes harmful command in pre-installation script to send sensitive data to an arbitrary domain. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ba40a9eda5717392c99efe0516b4a42a0606f1f80cfa4f4887aa56fd0a4eaf93 Any computer that has this package install...
MAL-2024-11909 Malicious code in tsanjint (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51bc4162c9661fcf380821e0b575282ec5c1e6d7a6732cc427c637a581d909e1 The OpenSSF Package Analysis project identified 'tsanjint' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes...
MAL-2024-11890 Malicious code in @saferpay/logging (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00760b75ef6449f1f4125794bd96880aae15b6a332fb2103a23c849e0d0d01f2 The OpenSSF Package Analysis project identified '@saferpay/logging' @ 5.9.1 npm as malicious. It is considered malicious because: - The package...