MAL-2024-11894 Malicious code in @poclabs/exo-phanto (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 16099727b5763987367fb2154b905db4e62696f192e788113686a84c950ad416 The OpenSSF Package Analysis project identified '@poclabs/exo-phanto' @ 1.0.12 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-11892 Malicious code in vercel-repros (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 61ab9d6c179c19b7bd4e20a4c65605457887724fa5f2bd4e0abfcdea66f7ff2f The OpenSSF Package Analysis project identified 'vercel-repros' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11909 Malicious code in tsanjint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51bc4162c9661fcf380821e0b575282ec5c1e6d7a6732cc427c637a581d909e1 The OpenSSF Package Analysis project identified 'tsanjint' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes...

MAL-2024-11886 Malicious code in @monkey-tilt/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8ac39833535be0553f3d6a87a64286940b30b0fc55a5e1c80c907518b10053b8 The OpenSSF Package Analysis project identified '@monkey-tilt/ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11889 Malicious code in @saferpay/eslint-config-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1623fcac8f83c2a752fa07e95cf1391d1f31dd3b8f757f4dbf3e3c170eb7d88d The OpenSSF Package Analysis project identified '@saferpay/eslint-config-react' @ 5.9.2 npm as malicious. It is considered malicious because: -...

MAL-2024-11890 Malicious code in @saferpay/logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00760b75ef6449f1f4125794bd96880aae15b6a332fb2103a23c849e0d0d01f2 The OpenSSF Package Analysis project identified '@saferpay/logging' @ 5.9.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11885 Malicious code in brodocs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9c60d327570269d6e3001d1418f96156cff6084fdbcd4d51ffca678c1749116 The OpenSSF Package Analysis project identified 'brodocs' @ 2.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-11883 Malicious code in microsoft.applicationinsights.windowsapps (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52a55ac73cfe94f23310de107d74ba82bfa2e8ae17f9742af50ef4e2da42c98d The OpenSSF Package Analysis project identified 'microsoft.applicationinsights.windowsapps' @ 99.99.99 npm as malicious. It is considered...

MAL-2024-11884 Malicious code in start-decent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74681df6bc6b8b3247624569b8632e201a6fac47376cc8561d59fccc697d83ab The OpenSSF Package Analysis project identified 'start-decent' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11882 Malicious code in microsoft.applicationinsights.persistencechannel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c6d541610ea02e1c898560a24798cf5ccb4c38d66f367bc6f205cc4fe5377dc The OpenSSF Package Analysis project identified 'microsoft.applicationinsights.persistencechannel' @ 99.99.99 npm as malicious. It is considered...

MAL-2024-11881 Malicious code in pokedex-vue3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23c03b4e03986cba75894fb0016bc2e1feb0c72ef2c06287030498b8f7a48ea1 The OpenSSF Package Analysis project identified 'pokedex-vue3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11880 Malicious code in shoaib-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb95e309abd17903fc4f82a78f56fa78a8e2e46cfa345d7356ed4a19c38c74f7 The OpenSSF Package Analysis project identified 'shoaib-demo' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11878 Malicious code in spacexstats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3d5802346cd5966361f229a602839453998b6251e428ec6638141f6fcdb3c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11875 Malicious code in asymmetric-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-11876 Malicious code in web3-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965af70ebf07de371170bda6a257b464ee058430c0f1d6112323bacabbe19d5c The OpenSSF Package Analysis project identified 'web3-docs' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11874 Malicious code in react-vis-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis add23f4d15e6249dcdf1487e1ba15a538376d6c820e7afecf316deaf47dbd959 The OpenSSF Package Analysis project identified 'react-vis-website' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11870 Malicious code in bsc-genesis-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11869 Malicious code in questdb-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 292ba477ee3d52c63d6ed6f224aac50507b0f816c20c525c36dc99f37f411eba The OpenSSF Package Analysis project identified 'questdb-console' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11868 Malicious code in 32red-database (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61467e40b369ce42bb9addcd5f11f62f444c0a9cf8e30253f0d5ca79697c68a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11867 Malicious code in 32red-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d6fd8b74aa90de644864280c7ff35c25fb0c3c059d18172022a417da92eacd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...