Malicious code in vscode-mlir (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c610eb26b75afffa49527255692e967a24bbe7fd61242d8c2f45420c72d9b589 The OpenSSF Package Analysis project identified 'vscode-mlir' @ 2.0.1 npm as malicious. It is considered malicious because: - The package execut...

MAL-2024-60 Malicious code in @neogov/linkanx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 133eddd55383f57d0ee29c0a3eb7343b9118e95d6c54ab71bb75aa457dd5d2d0 The OpenSSF Package Analysis project identified '@neogov/linkanx' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8759 Malicious code in spectrum-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2eb941fc5a07c41506c9bdc68d1b469aad8f8b70b2258d975d0a6255516c5f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in newpackagetest2028 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3f8a309179fb8daa3b3ff1d8a250fe566f5d138ab913e435928491185de07f1c Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

burn() and borrow() in LendingPool are very likely to revert due to insufficient cash and could be triggered maliciously

Lines of code Vulnerability details Impact Users might not always be able to burn or borrow due to being frontrunned by other borrow or burn calls, potentially in a malicious manner so funds don't leave the LendingPool. Proof of Concept This attack could happen frequently because the health of a...

MAL-2023-8731 Malicious code in @unilin/dlw.scbase.staticsite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79abbb721270b1006f42d07a2af44116ea33ce6faf62ec8325f4a48cdcdf0ef0 The OpenSSF Package Analysis project identified '@unilin/dlw.scbase.staticsite' @ 9999.10.11 npm as malicious. It is considered malicious becaus...

MAL-2023-8706 Malicious code in index.marko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 336343a184ccf4402e0278fcf3e2dbae7c666c71d9348b07ccf376b161570c9a The OpenSSF Package Analysis project identified 'index.marko' @ 1.0.0 npm as malicious. It is considered malicious because: - The package execut...

Mac Users Beware: New Trojan-Proxy Malware Spreading via Pirated Software

Unauthorized websites distributing trojanized versions of cracked software have been found to infect Apple macOS users with a new Trojan-Proxy malware. "Attackers can use this type of malware to gain money by building a proxy server network or to perform criminal acts on behalf of the victim: to...

MAL-2023-8667 Malicious code in @huby/infovist-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6a9d9af98833f94e0e3d73a4dc90f662b96da4620bdbacdc5121e08983b066b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

MAL-2023-8636 Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

Malicious code in @zscaler/ec-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31bceaac08bb6d621ea722590b8ba815799a6af81cc537fa0796ea7983b0f1d2 The OpenSSF Package Analysis project identified '@zscaler/ec-domain' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8472 Malicious code in data-type-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90c26075e74ebc9cae6a492f997974105a4951be23a89236c7e84a0a9e169933 The OpenSSF Package Analysis project identified 'data-type-public' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in xterm-addon-clipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cf6d3796e2698ca788f0833376dcbd11460b764506f5ffb63bdd8e71262113e The OpenSSF Package Analysis project identified 'xterm-addon-clipboard' @ 6.0.7 npm as malicious. It is considered malicious because: - The...

MAL-2023-8444 Malicious code in xterm-addon-clipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cf6d3796e2698ca788f0833376dcbd11460b764506f5ffb63bdd8e71262113e The OpenSSF Package Analysis project identified 'xterm-addon-clipboard' @ 6.0.7 npm as malicious. It is considered malicious because: - The...

MAL-2023-8423 Malicious code in @olxui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a653affd18c77f72727a33c59b7baebb39d3a38ecec4a894d1eff832cbc0501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8413 Malicious code in xterm-addon-unicode-graphemes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e517091262ed409fb53011792754e279673a300f5e9abf2377eec73ed814f9c The OpenSSF Package Analysis project identified 'xterm-addon-unicode-graphemes' @ 6.0.6 npm as malicious. It is considered malicious because: -...

MAL-2023-8406 Malicious code in fadam-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02e81c60df4cba570ba561c45c4e1f48fe798f16078ef1a7c2c601cdb3edf1f7 The OpenSSF Package Analysis project identified 'fadam-frontend' @ 101.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8331 Malicious code in microsoft-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b84eb200adc4898d4297b41d18f6626e0f523adcc46e93fee22927b058427eff The OpenSSF Package Analysis project identified 'microsoft-ux' @ 1.2.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in react-fixtures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 313318cff861c45bde316c24fa07d680f6c59e74a77ae6e65c31fe66f54e2f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...