MAL-2024-11922 Malicious code in blz-internal-pkg_update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c0576719ed89c86b80e8064de18e089618752aa208fa88dfc410ad73e84bf8e The OpenSSF Package Analysis project identified 'blz-internal-pkgupdate' @ 7.7.11 npm as malicious. It is considered malicious because: - The...

MAL-2024-11913 Malicious code in hardhat-deploy-others (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85a3b67882ce27c0db4858f9509396a2a74b670426897002d8ccc9d29537c008 The OpenSSF Package Analysis project identified 'hardhat-deploy-others' @ 9.9.10 npm as malicious. It is considered malicious because: - The...

MAL-2024-11895 Malicious code in pai-web-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8b6dc3e380e435ff7d74a44ec8841c1577a1bd74c03ef3dc368e2514e485d8fc The OpenSSF Package Analysis project identified 'pai-web-components' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11875 Malicious code in asymmetric-key-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d6f4c9090980b70af6effbd1be18a9ca571dd90a4f1cca30d44f84083dcec613 The OpenSSF Package Analysis project identified 'asymmetric-key-generator' @ 9.9.9 npm as malicious. It is considered malicious because: - The...

MAL-2024-11870 Malicious code in bsc-genesis-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11858 Malicious code in orderly-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1c6d1816f12ad3d52d2229d938ccf0f5ec2b0f48ba66613c031b72631e23cc77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11841 Malicious code in graphql.vscode-graphql-syntax (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0d28da17294cea5d68bf358dd4576cf98bbc3d373b4add618e2c56ab5c18358 The OpenSSF Package Analysis project identified 'graphql.vscode-graphql-syntax' @ 99.99.99 npm as malicious. It is considered malicious because:...

MAL-2024-11836 Malicious code in action-mattermost-notify (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff777c42ea9a589391478ecfd89da15137033e8ce5e0961b26f277f6e055c70e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in casino-luzern-easter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e48867ff5b177606a9ae5bcb27cf273c464b77b0ac518170e08739c0f3f8f80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11872 Malicious code in casino-luzern-easter-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6e48867ff5b177606a9ae5bcb27cf273c464b77b0ac518170e08739c0f3f8f80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11787 Malicious code in anumanu2324 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7f4968a40c8a0664918114879119462d46034747809e1dfae1d03748017f9708 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11781 Malicious code in @aoflmkt/is-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e1efcaba98a4db72e85c952c1936c99152081de71c2732e8189d9ad65390116 The OpenSSF Package Analysis project identified '@aoflmkt/is-desktop' @ 100.100.106 npm as malicious. It is considered malicious because: - The...

MAL-2024-11779 Malicious code in blacky-sheppoing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd5fabc8fe73f97f7fe5b3fc0d6bcb5d30d10325cdc85801ff4b38f51112d597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in themes-vendor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c01e7f6fdbbed9b6db3db6a981479a8264b303dedb88de43a2b051db3b1e0498 The OpenSSF Package Analysis project identified 'themes-vendor' @ 0.0.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in orbit-playroom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e31235ced932a06aa97ace0640c50400f6a56221e702267eeff05b03eb7fa21a The OpenSSF Package Analysis project identified 'orbit-playroom' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11753 Malicious code in promisified-resource-pool123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f3a42e7d4fdb14241d0b230905da182d6726bba306ef7dc7cbd565eadf2192e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11244 Malicious code in nextcloud2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0849e0cda274c845158689c282bae36877b598c0a3e458b2e44243c3acd542d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11239 Malicious code in bbb-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 521983fba00c501c41ccbb9e7737eed8be5cff75f427bd2db33daacfdc645e02 The OpenSSF Package Analysis project identified 'bbb-logging' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11228 Malicious code in qwilr-examples-create-page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e0bbec32dcccb555fb5667a8f1cb7f4973512ac8acbea5261a4ff7d14a952476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11227 Malicious code in editor-devel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7aadc3203cf919f8f9db8494d53d7f655b0cc7b396989337e9ff334a971e4f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...