MAL-2024-11840 Malicious code in resultstore-search-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85736ae7368ae102434c7881aa59599a9d612a91f34c7b4f443f3604c21f60c8 The OpenSSF Package Analysis project identified 'resultstore-search-client' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-11838 Malicious code in openai-realtime-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63903b0e2f2b97ef7bde23b987c10da50353b221fdaa4036434af2c3c6e1ab47 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11837 Malicious code in flame-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 573f0562922d2b7705bac8770fd0432d48b2e0325a561ab6b21ff0710974e426 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-mattermost-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff777c42ea9a589391478ecfd89da15137033e8ce5e0961b26f277f6e055c70e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11836 Malicious code in action-mattermost-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff777c42ea9a589391478ecfd89da15137033e8ce5e0961b26f277f6e055c70e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11825 Malicious code in rarible-program-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ebfe242bd7c35911f61115ae2c00d485a5bb93b81ddf36f6f40af24fb1cd977 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11823 Malicious code in simulation_service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf6c7d5222c0cf39b74d1359864f3ae93cef37354056d3bed6b1d95df61d66a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11822 Malicious code in pobreiaia22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f201a6e789edf5a6b86e429b07c01f4098e234a4860594f42d18fa8590259208 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11821 Malicious code in pipedream-curl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8b5e047b6a8fdba2b0c3473a51edbdb9b488f22377ca3a66bb206193e7da7e5 The OpenSSF Package Analysis project identified 'pipedream-curl' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11818 Malicious code in auth0-lock-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc8cb7c85f580c66397adec583bbd6623eafcb98683fcf6299ca73188892009f The OpenSSF Package Analysis project identified 'auth0-lock-webpack' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11819 Malicious code in lana-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7484f94ee4543b03e2d833c9553eea0123b2a73f99621a2e99a38139146b151 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11802 Malicious code in azuredatastudio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f18b345dc494772b0800d6b81807d5d930ceb567876dab5d06e478d66f5cda77 The OpenSSF Package Analysis project identified 'azuredatastudio' @ 1.53.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11799 Malicious code in test-rce3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 268f9a9b82d8e6d94dede1f419570ec5e28e30480f9ee76c010cacc4e248fd81 The OpenSSF Package Analysis project identified 'test-rce3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11798 Malicious code in testing-example-amnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e3e68fcb0722dd3025334d128515302686aff3ebed84afc0747731353153fff The OpenSSF Package Analysis project identified 'testing-example-amnu' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-11797 Malicious code in testin-elengos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a8b81d93eabbd732b074f3694f5d0bd4969f90c18eceb07c91c188cba1f26b5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11794 Malicious code in bug-bounttest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7018070d75a9db3006ec183ff527cb9b6ee7d018d852bf06d3892a04874aa03 The OpenSSF Package Analysis project identified 'bug-bounttest' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11793 Malicious code in dextester123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26d87ee78544b18671f34fdbfc2bb566d83d78f917c88958141e6c335ba9242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11792 Malicious code in @infoserver/gov-shared-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b54fde6a5995ffcf57ff5e926b8e0ddb11018b6a6107970a724342f83745df0 The OpenSSF Package Analysis project identified '@infoserver/gov-shared-ui' @ 21.2.15 npm as malicious. It is considered malicious because: - Th...

MAL-2024-11791 Malicious code in raptor-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 585ea8fb4bbab2014a88a88807c9c5150eaf104c34a0d3158c0b7ed114aba2c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11790 Malicious code in letstryout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a93677f9ccf05c515928c2e92d24da7333665953bc870d75a78a1d20b4ac3e3 The OpenSSF Package Analysis project identified 'letstryout' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...