MAL-2024-1276 Malicious code in cz-ifood-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65b5439bd3051d2315be6f4ae90f3235c5e41c2d9afa4a3c8f6ff3271c31cb9a The OpenSSF Package Analysis project identified 'cz-ifood-conventional-changelog' @ 1.0.101 npm as malicious. It is considered malicious because...

MAL-2024-1202 Malicious code in lyft-core (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2fa096ec56c6910a67c11cdb8b7ebb3bede054bf1ea7eb926fff07e2265c00dc The OpenSSF Package Analysis project identified 'lyft-core' @ 999.3.9 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1177 Malicious code in poptoken-builder-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e47c000bd16e968d0cf79cedeb817099f703aeaa335771981d0c5a9f43982b73 The OpenSSF Package Analysis project identified 'poptoken-builder-node' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in u-workflow.module.common.hour-of-week (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fa993331c82ce09532f10dfb1eb3586e1a3343188c93733712aad7f47cb49539 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1185 Malicious code in sparklog (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa3ac41199a392a32d649e60da4ff9d98d6ceb0d956297d976ce3b5dc948dc91 The OpenSSF Package Analysis project identified 'sparklog' @ 0.0.3 pypi as malicious. It is considered malicious because: - The package executes...

MAL-2024-1186 Malicious code in types-for-adobe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 927dcbc233169c84ab7ef0e97232782f6bb821d476409cc6ccc8587995dabdc8 The OpenSSF Package Analysis project identified 'types-for-adobe' @ 99.3.9 pypi as malicious. It is considered malicious because: - The package...

Malicious code in @fin-php/npms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c46ddecabc6ffdb6fdcfe2d30dab50567e26874350c888ee02dd2869fb42124 The OpenSSF Package Analysis project identified '@fin-php/npms' @ 9.10.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1173 Malicious code in google-requests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f65c90bd401794ac768545381277a23159e66aa5b42a5ea05a38780fbcd691a The OpenSSF Package Analysis project identified 'google-requests' @ 99.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1143 Malicious code in familylink (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd324585f9b17cb0f06cf892908dbc6dd3a208bb5661635da6283fe5c05f544 The OpenSSF Package Analysis project identified 'familylink' @ 81.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1111 Malicious code in business-kpi-manager (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 273b321944297087263b5b5821cab2c1f54c8c91e75998fe8c8bca26b8ffb0b7 The OpenSSF Package Analysis project identified 'business-kpi-manager' @ 5.9.1 pypi as malicious. It is considered malicious because: - The...

MAL-2024-1103 Malicious code in lyft-requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d60f1a244bc4a4509672cc7a34d1db4ee83618066b02f41f15a6573ff6f5a2ff The OpenSSF Package Analysis project identified 'lyft-requests' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in testien1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dfd0b0e3c7d3359aa58759eee0924f42ff5a20aedc9be9bfcffe246fd5de6eda The OpenSSF Package Analysis project identified 'testien1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes...

MAL-2024-1053 Malicious code in testien1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dfd0b0e3c7d3359aa58759eee0924f42ff5a20aedc9be9bfcffe246fd5de6eda The OpenSSF Package Analysis project identified 'testien1' @ 1.0.0 npm as malicious. It is considered malicious because: - The package executes...

Malicious code in uikit-dark-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1635673444c06a301ab432c5be76003f80d7d35f1d66f5706f0bef811b9070cf The OpenSSF Package Analysis project identified 'uikit-dark-mode' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1035 Malicious code in uikit-dark-mode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1635673444c06a301ab432c5be76003f80d7d35f1d66f5706f0bef811b9070cf The OpenSSF Package Analysis project identified 'uikit-dark-mode' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

The Android banking trojan known as Anatsa has expanded its focus to include Slovakia, Slovenia, and Czechia as part of a new campaign observed in November 2023. "Some of the droppers in the campaign successfully exploited the accessibility service, despite Google Play's enhanced detection and...

MAL-2024-993 Malicious code in privdel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis edd03ccc68c5b01bcfcb939f4794749d8c8a797d45611b86636883add7bb5b44 The OpenSSF Package Analysis project identified 'privdel' @ 1.999.0 npm as malicious. It is considered malicious because: - The package executes...

MAL-2024-947 Malicious code in moblig-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a9601f46c6924bb210289c184590485d4dabf6696dc6c0da5720465002bcf06 The OpenSSF Package Analysis project identified 'moblig-npm' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

Malicious code in dragon7-dc-vulntest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7fbbb2c388456ad9304f06570c8ddd459764422103836f0fac928c631d96cfec The OpenSSF Package Analysis project identified 'dragon7-dc-vulntest' @ 6.6.6 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-924 Malicious code in samsungads-publisher-portal-authorizer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bdf69166b497f7cd30a51ffff97b600796cbf77f8a34ead71e7ed700f40dfc7 The OpenSSF Package Analysis project identified 'samsungads-publisher-portal-authorizer' @ 99999.999.0 npm as malicious. It is considered...