MAL-2024-10313 Malicious code in evernote-thrift (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0cafc1fbe5d3aca2d0d736873649060e6c9dce551db713b3d91723a78f9a2f22 The OpenSSF Package Analysis project identified 'evernote-thrift' @ 1.4.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in @captivateiq/random (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee1cb55ec1b56be298aa872d3923e32e94edea10bbe8563c0ecd12a0d93cf7f7 The OpenSSF Package Analysis project identified '@captivateiq/random' @ 1.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in @captivateiq/events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fc4737a464a63150ee660fef685ac907d15745ab89d4dea2872f3896362f599 The OpenSSF Package Analysis project identified '@captivateiq/events' @ 19.3.9 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10309 Malicious code in rentez-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d38f5182bdac1a9d1dc8a7edd04bf4887e39416ac443361fbe2b4de7341c0360 The OpenSSF Package Analysis project identified 'rentez-docs' @ 6.6.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10305 Malicious code in byted_service_env (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b298349a0b9738e608252ef9267c00688e51775569da6d97fde70f4819a2b2b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wawawa123s12sd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3373d6cdf1ebe94927b4ee361ebbcb1ab21ae82c95836e692ecd16fa1b8eca49 The OpenSSF Package Analysis project identified 'wawawa123s12sd' @ 1.3.10 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10318 Malicious code in abdef (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4eb2fc563b8826f4b9b042759ccb550c442aefe0af7c3c96fe10ec0895cc02ff The OpenSSF Package Analysis project identified 'abdef' @ 1.2.9 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-10299 Malicious code in @amagioss/js-timecode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cd0e634cb711f3c81ba053e00875d83653e7f7f70757ace4e3234b538bc5c88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10298 Malicious code in blossom-flex-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 47d07f8c0d920761bbd8a7c5575c35beae11b8587240d944320d8c88434ad307 The OpenSSF Package Analysis project identified 'blossom-flex-ui' @ 99.99.90 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10271 Malicious code in directv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57af5334c27c7a75d55d6c7459a1d781d609f77d8afe753179b6492c6ac8808 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10281 Malicious code in test-package2345 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 376f2c62728c1d9f82712acd63e4377bd525a0faae2b00a7746dd322c8e5379d The OpenSSF Package Analysis project identified 'test-package2345' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10259 Malicious code in custom-ui-extension-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dab5118124877f1b10d3a788f122b5860bb073bbb94ce2f89305ab74521ade9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10257 Malicious code in dragonhack-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38b1338a8aad6f97922b365716dc5b0b1ae6065a7bbe28daa4c74eefc0155c11 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10231 Malicious code in wasabicons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffb0fc29ff4926fd2ba01ef1bcfac2bb7f009eca3c1943a131b61b8b2827aa78 The OpenSSF Package Analysis project identified 'wasabicons' @ 98.98.98 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10227 Malicious code in @woody-mrs-potato/utils-banking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a69debf19a38ac2408ae18cd25b408c34eadd0ebd68fe0e06377b9719dd82784 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9454 Malicious code in ohcm-polymerase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ed5d7615b41cea1ded4a590d20e42f353b3a6e43315a2eac25a8c63ab6607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9443 Malicious code in sn-flow-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c83ae0b3aa74be7de2508ec17549e3bc00e40edd30c62322e91be77ea48e69 package.json declares a preinstall hook "preinstall": "node index.js" that runs index.js automatically on npm install. index.js requires childprocess...

MAL-2024-9442 Malicious code in @ng-cat/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c0268f0af6152271247edc368914f17157c4261598da984de9ee52333993057 The OpenSSF Package Analysis project identified '@ng-cat/common' @ 9.99.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9440 Malicious code in unity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca5747856927b0c97d3b66882120df5fa30a88c49728022ee836563ea39ea4 The OpenSSF Package Analysis project identified 'unity-components' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in unity-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19ca5747856927b0c97d3b66882120df5fa30a88c49728022ee836563ea39ea4 The OpenSSF Package Analysis project identified 'unity-components' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...