MAL-2024-9067 Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

MAL-2024-9057 Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9048 Malicious code in ens.domains-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 86e21617540f2c51cdccf6deb871c1f9e76cfaeb06a565c7265a1d7d5674e293 The OpenSSF Package Analysis project identified 'ens.domains-v2' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9049 Malicious code in transferwise-iconfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20403e6738cf9e7007032519a10c0ba231cbd8b284a67324bdbc083663503fc3 The OpenSSF Package Analysis project identified 'transferwise-iconfont' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in transferwise-iconfont (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20403e6738cf9e7007032519a10c0ba231cbd8b284a67324bdbc083663503fc3 The OpenSSF Package Analysis project identified 'transferwise-iconfont' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9044 Malicious code in hakka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1baf872685dd4243ab821d1f37c342f5af09558faf5e9bc83e1fd16505802029 The OpenSSF Package Analysis project identified 'hakka' @ 2.1.2 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-9042 Malicious code in o-layout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b6d737f5ee09d703e74c23a6e240e943dacba7722152cb737b6e67feeda7bfeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ds-home (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13795fdee5b77f52426cd3650250e826b6df39c418ac2956442a8016b4535e4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9036 Malicious code in @kp-admin/history (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9291332b4f8b2a62e28230207b0b18e9e9f5e162e170870f684b14a27ea74f34 The OpenSSF Package Analysis project identified '@kp-admin/history' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9032 Malicious code in @kp-admin/main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e5dc03ae8edb86b5c5bd3968c80bda004a2d31b59095717c3ca8d4f6c1a9a553 The OpenSSF Package Analysis project identified '@kp-admin/main' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9030 Malicious code in intercom-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eb4800eebfbaf5b4769f3ed6e0cdff3b37e8f0ce5c2f08b9b57dfa6fea62394 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9029 Malicious code in nuvei-commercetools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 841be1dc2418006e102dcc464f2f6219e3745c922315979f19e9524f54693c2d The OpenSSF Package Analysis project identified 'nuvei-commercetools' @ 1.5.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in cryptograohy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 67095679f8af3205e005b17a996da2ba17789715d7c66e4fcf31d8c387b85c00 The pyprettifier library has a feature to send out the user home path throuh the logger. It's attached to the init of EmojiConverter class. Other related...

Malicious code in saywh11222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66e2b9f8537aaebeea0768739ff431e4fe4c8dc5ea9bab0d191d6f555384b25f The OpenSSF Package Analysis project identified 'saywh11222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-9022 Malicious code in saywh11222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 66e2b9f8537aaebeea0768739ff431e4fe4c8dc5ea9bab0d191d6f555384b25f The OpenSSF Package Analysis project identified 'saywh11222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-9019 Malicious code in alertsorchestration-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad590e8c8853e4883c2994808bae19870b1d76002b74c084b196e7e4ebcf6cea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9017 Malicious code in notrealpackage-blac (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 73568a8a9ef3dda38a3e5c29930a0e64d1cc37f21e1cb90f77328c71f83604fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9005 Malicious code in saywh222 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 776c407a0a9a3c3b242d222e9b22ada03db555fd91538182fdc5d059b1ddcae7 The OpenSSF Package Analysis project identified 'saywh222' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in saywhu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67dc65eeb23101b56981a723f315b344ac7ba4773b9a712f82009fbccea7b430 The OpenSSF Package Analysis project identified 'saywhu' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package communicat...

MAL-2024-8997 Malicious code in neuron-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39e11d5c0e9f49ca7c1e136d6f73f692162e1873d0def4a3135bd3dacbdd9ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...