MAL-2024-11931 Malicious code in @rrvis/vehicle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d3692e2a68c16cc17e0cf9a54c84db3ba0a858f97b9cad3335deee0f7776d483 The OpenSSF Package Analysis project identified '@rrvis/vehicle' @ 99.99.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11928 Malicious code in @rrvis/logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11fa65d69306fc86aca5bb9af5b91bc3c1dd35766ab0f5dd010fb492799916bf The OpenSSF Package Analysis project identified '@rrvis/logger' @ 99.99.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11926 Malicious code in tracking-protection-experiment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7e3c4e6767c5b9de18b97979fd15fbe90fdc3b01d78bb3ce044f224e588787a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11925 Malicious code in com.unity.assetgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0dee635c5dd8d8b009c47b1924e679ac0f95c83a41bbff41ff4d9978f75dae3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HTML Attribute Injection

github.com/gohugoio/hugo is vulnerable to HTML Attribute Injection. The vulnerability is due to insufficient sanitization and escaping of HTML attributes in the internal templates, allows untrusted user input, such as Markdown content, to be processed and rendered without proper handling of...

MAL-2024-11923 Malicious code in non-existing-dependency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a1d6cdc7e109d95350fca4106c87505a6e873352199682c0b1edc6cb36e3ea84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11920 Malicious code in redux-form-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae31362c43d68bb1256c0bfe637e48b0ee30c4bcb18f8768cf7c83153c2beaf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11919 Malicious code in yandex-pandora-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e7c8829575ea2c09d2db8f6f98a73635e882f6ac8084b06174761270128f3438 The OpenSSF Package Analysis project identified 'yandex-pandora-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-11918 Malicious code in auto-assign-team-actionn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e84658b8c37896aa0e8c456f986500c73ce8af5a8e7696decc2db2a6fb7b450d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11917 Malicious code in @goldenfront/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f95dc18125b3436d5aa28ec2749393d36b97510a1b2f2796200c8e6d8fecd00e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ifood2-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a15f07f3dda7d132a00d57e04e31bc1c982857fc28d86ec6934974c3ad314723 The OpenSSF Package Analysis project identified 'ifood2-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11915 Malicious code in ifood2-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a15f07f3dda7d132a00d57e04e31bc1c982857fc28d86ec6934974c3ad314723 The OpenSSF Package Analysis project identified 'ifood2-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11912 Malicious code in focal-examples (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a810e0097be46a2d0ef76ac3c6aa2088c3467e69485c408f22014bc66dd07530 The OpenSSF Package Analysis project identified 'focal-examples' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11911 Malicious code in baby-loris (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9155edd098ee3fed04541b192087704f5a42b1f149bdd0f4f487d7e0ae941870 The OpenSSF Package Analysis project identified 'baby-loris' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11899 Malicious code in anargha-manu2324 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5d8b88223767d58cf126c0232a9c2106316053505e2b4d4fdefe17848c1b3561 The OpenSSF Package Analysis project identified 'anargha-manu2324' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11898 Malicious code in onchain-commerce-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 374959d6dab58a7f741e5a9cb7c7e9624124d3205c450bd79e0785c083a19f6b The OpenSSF Package Analysis project identified 'onchain-commerce-template' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-11897 Malicious code in yir-image-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6cf1af517e2c58b4cae223cb5d746eed91636fca7b9843a427577a641e12a0f7 The OpenSSF Package Analysis project identified 'yir-image-gen' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11896 Malicious code in haefgerasgrae (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c51eb8de5b4c76701af20deeb703ba85374c2036c17fd5bcd09b7b0233c6ae34 The OpenSSF Package Analysis project identified 'haefgerasgrae' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

MAL-2024-11895 Malicious code in pai-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b6dc3e380e435ff7d74a44ec8841c1577a1bd74c03ef3dc368e2514e485d8fc The OpenSSF Package Analysis project identified 'pai-web-components' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11894 Malicious code in @poclabs/exo-phanto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 16099727b5763987367fb2154b905db4e62696f192e788113686a84c950ad416 The OpenSSF Package Analysis project identified '@poclabs/exo-phanto' @ 1.0.12 npm as malicious. It is considered malicious because: - The packa...