MAL-2024-8940 Malicious code in bce-service-bos-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 455254dc1b6facea5922040875102470c6bec34eb212c1966f2fda65f5e9277e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8850 Malicious code in azure-iothub-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - Th...

MAL-2024-10226 Malicious code in ori-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b71bf5ca700406e224508f08266da2a443693d48eb216c3854de6be0d1451346 The OpenSSF Package Analysis project identified 'ori-poc' @ 1.0.3 npm as malicious. It is considered malicious because: - The package executes o...

Malicious code in ori-gabriel-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 80e4a738169f3040e2786d44f744d9646f6ae11d6b59e30d03c4edba106a7c2d The OpenSSF Package Analysis project identified 'ori-gabriel-test' @ 7.7.8 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8733 Malicious code in @maas-themes/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4481efc3fc653e0e4e03b7769498d8a50b20b1df2d61d153c2b48818711b789d The OpenSSF Package Analysis project identified '@maas-themes/config' @ 0.2.3 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-8736 Malicious code in @maas-tools/keycloak (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e82958168e113d6a4eb9f979c301d52f5df0373ce692f3db35969310bf10af5 The OpenSSF Package Analysis project identified '@maas-tools/keycloak' @ 2.1.5 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-8738 Malicious code in @maas-tools/nested-browser-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b6c3a06451f8c94f543e39c01595521037c5dba7f8873e64db843e17be7bb8b1 The OpenSSF Package Analysis project identified '@maas-tools/nested-browser-router' @ 2.0.1 npm as malicious. It is considered malicious because...

MAL-2024-8725 Malicious code in td-emerald-standards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2f97f10309683aa0addae921845bdf8ce584670d8640544b7eeb2c41501e7af The OpenSSF Package Analysis project identified 'td-emerald-standards' @ 6.6.6 npm as malicious. It is considered malicious because: - The packa...

Malicious code in soultracker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f60b37d84566711ce6977710fcb74c3358a2c95655c8e115dbb863f67ff4009 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in nvmfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147e71ec4a806f079f678e7df61fa161680442319b62f425a34e7e8bd87b1e85 The OpenSSF Package Analysis project identified 'nvmfix' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7882 Malicious code in miapimanager-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1401d4d9e906af349022a130fd98dff7fd5a66545792c1f31587312907431e6 The OpenSSF Package Analysis project identified 'miapimanager-fe' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in miapimanager-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1401d4d9e906af349022a130fd98dff7fd5a66545792c1f31587312907431e6 The OpenSSF Package Analysis project identified 'miapimanager-fe' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7831 Malicious code in byted-cg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90e251b9f3c49de738ecec6d31759290c20383f748735d901d797110fd1b6fb2 The OpenSSF Package Analysis project identified 'byted-cg' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-4698 Malicious code in cugraph-dgl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6c1f145fd51ee7737cb44e28b07d4ec3bfe53f4a8aac51d0b8bce58ef8bd71f7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-7836 Malicious code in health-check-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef9d93b4469df4d458d4c4a226b45fa7baf7760a84cd3d8b5fc84fb990e0e6ba The OpenSSF Package Analysis project identified 'health-check-nodejs' @ 3.16.1 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-7837 Malicious code in tyibyc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 786311540d56cd996efe5220ccf60e906bf9ba3659372a080971ecf9b2e858dc The OpenSSF Package Analysis project identified 'tyibyc' @ 1.5.31 npm as malicious. It is considered malicious because: - The package executes o...

MAL-2024-7776 Malicious code in test-ssssnpm-com-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c2a4fd579e0096b31822938848098183be8aa46f43fc6673a752707bdfeec544 The OpenSSF Package Analysis project identified 'test-ssssnpm-com-test' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7742 Malicious code in pewspwnrepo4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e19195a9e0daa1405f9c055a13cf7164173d64c6dcb74f8ecb42b2a49b717b97 The OpenSSF Package Analysis project identified 'pewspwnrepo4' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7739 Malicious code in d3-pprof (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cb125a721a5edc27b63a6a6213519acc4963b68002982f743a2bd51498852979 The OpenSSF Package Analysis project identified 'd3-pprof' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7646 Malicious code in sap-base64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ddcb3e8e9c57661ff9d809f14befe4241d65754544d987500bb286bda041f77 The OpenSSF Package Analysis project identified 'sap-base64' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...