Malicious code in kmf-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce04d25dced1e4c2398d7d91568783b983f326444098ecff8ddf7c29468d752c [email protected] is published with the version-number and behavior shape of a dependency-confusion reconnaissance beacon rather than an i18n...

Malicious code in kafka-helmsman (PyPI)

Source: ossf-package-analysis a2d266a2b4e9df8f2466cfb34e58fe98c636cb75d4ad1ec08cee919bd9a86588 The OpenSSF Package Analysis project identified 'kafka-helmsman' @ 99.0.1 pypi as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in online-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9cc23b20e29ff5e2382e8812e86048148646c43b844f6f73db4581e790f761 [email protected] is a dependency-confusion squat name claimed at version 99.0.0 with an inert main entry whose preinstall lifecycle script runs...

Malicious code in @digift/cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 103ec4b63e45d1bc9b3e3c2e616eedfa134f9f8bdcb6480f33fbbaa280038803 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pwaplatform/module-sso-integration (npm)

Source: ossf-package-analysis 774cfab0bd1150e7f7e40819176562e4e19983d87b347f5a55a0b60dfbbca7d3 The OpenSSF Package Analysis project identified '@pwaplatform/module-sso-integration' @ 99.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated...

Malicious code in just-config-data (npm)

Source: ossf-package-analysis 8f014f07f8a3583cf07008dc133b2276390b17d34f6eae237b48210437247544 The OpenSSF Package Analysis project identified 'just-config-data' @ 0.0.3 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in juno-autodiscovery-browser (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis 41d44749dbef196f862f8cab350ac18340a99385cbe96ecb2c13a1eed2603d99 The OpenSSF Package Analysis project identified 'juno-autodiscovery-browser' @ 9999.0.1 npm as malicious. It is considered...

Malicious code in is24 (npm)

Source: ossf-package-analysis 1781ddf04bb479bb1a5178f987729c525417b1cc220c1be7fefbd9f86ccc7a23 The OpenSSF Package Analysis project identified 'is24' @ 9.9.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. - The...

Malicious code in invalid-polyfill-boolean (npm)

Source: ossf-package-analysis 494509102be194f3de6962a2ed4e22af22ecab01d9fb1c460b2cf0d93c4e6591 The OpenSSF Package Analysis project identified 'invalid-polyfill-boolean' @ 99.0.9 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicio...

Malicious code in internal-company-module-test-1337 (npm)

Source: amazon-inspector ffa107cadda6301a772af8727ebafd976365c28371cddd211c176a57b12715d9 The package internal-company-module-test-1337 was found to contain malicious code. Source: ossf-package-analysis 07c2475e90b699654b9aa4a19c5ca0592001681d7a28996dc02ff7c31faf7343 The OpenSSF Package Analysis...

Malicious code in ing-shared-navigation-de (npm)

Source: ossf-package-analysis 74f93af2ce71593d4858563cf9cb0ae31150636aef60cad09f5ad639edda6194 The OpenSSF Package Analysis project identified 'ing-shared-navigation-de' @ 200.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in ikea-jssdk (npm)

Source: ossf-package-analysis c7ee2c27d65f23dc603308d3cb624e657745f399a18181feac7ab7a3d176d931 The OpenSSF Package Analysis project identified 'ikea-jssdk' @ 1.2.1 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity. --...

Malicious code in google-webfonts-helper (npm)

The package communicates with a domain associated with malicious activity. Source: ossf-package-analysis ba7d8c4c4151033fdccecb7ed439075f6c8eb39490462dd7b25aac68d2a22482 The OpenSSF Package Analysis project identified 'google-webfonts-helper' @ 10.0.0 npm as malicious. It is considered malicious...

Malicious code in fake-package-apache-with-copyleft-dep (npm)

Source: ossf-package-analysis dccffa1d5f84a8476d98fd5eed5c0401aba753ef0916b506d1b8f9687029351d The OpenSSF Package Analysis project identified 'fake-package-apache-with-copyleft-dep' @ 4.0.0 npm as malicious. It is considered malicious because: - The package communicates with a domain associated...

Malicious code in events-web1 (npm)

The package communicates with a domain associated with malicious activity. --- Credit: OpenSSF source...

Malicious code in elf-stats-tinsel-candy-605 (npm)

Source: amazon-inspector 81cbef0d18c705f5e2d320ebbffd2ca291c82eeed7bb636c5a582d7388790185 The package elf-stats-tinsel-candy-605 was found to contain malicious code. Source: ossf-package-analysis c432f49dc7e519859ce1fa043fb6290f59585d3ad680335eb2aea17e32f6f9d3 The OpenSSF Package Analysis project...

Malicious code in elf-stats-cranberry-sleigh-853 (npm)

Source: amazon-inspector f85ae12d2f730c46ea2549c98a491f8ccccf2c8f7a484258398ce7dad89c137c The package elf-stats-cranberry-sleigh-853 was found to contain malicious code. Source: ossf-package-analysis 8c2499eb605ed1cdd8896cb21357da72fa92cbb5d8b27048115bf63144046a39 The OpenSSF Package Analysis...

Malicious code in donuts.node-build (npm)

Source: ossf-package-analysis 6b8d6fee5827de9688cc9b83812dc32e54e33531a0bd2fd179dc3e2935564dc7 The OpenSSF Package Analysis project identified 'donuts.node-build' @ 99.99.104 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious...

Malicious code in docs-component-folder-selector (npm)

Source: ossf-package-analysis 029903e7351485fc54de0e50d6f2f3c9c822895bd8d97930476b5a69f23dd6f9 The OpenSSF Package Analysis project identified 'docs-component-folder-selector' @ 1.0.6 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...

Malicious code in docs-component-follow-public-pop (npm)

Source: ossf-package-analysis ee5ed5d036b992d7f499e1931abb9513f56db1572a9ea4d5fc7cc45e2140f5ad The OpenSSF Package Analysis project identified 'docs-component-follow-public-pop' @ 1.0.8 npm as malicious. It is considered malicious because: - The package communicates with a domain associated with...