MAL-2024-8994 Malicious code in assistants-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49dcd943b6b43273aa613aed19e623aa2ae67153ce323248811b64b441f38364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8985 Malicious code in setup-specmatic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37056a566edf4edb22af5350f7710d850797b914acbc38bfce3554f44db61d86 The OpenSSF Package Analysis project identified 'setup-specmatic' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8981 Malicious code in csm-installation-wizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9b5bdad9e0b6a88bc81e8ae16cc200d4c4ac3e021b0583309fbc4338574fc64b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8980 Malicious code in defillama-apy-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5607feee6e6c7126d6cba02f493742dca4eee003dd55793c1346373a66cbb9c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dp-bpsc-tiktok/ogc-analytics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 392d2ec573af02b972bc2bb4fd5b33b1c1f6bd8a2962744ed929259effae7c82 The OpenSSF Package Analysis project identified '@dp-bpsc-tiktok/ogc-analytics' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2024-8964 Malicious code in b2b-buyer-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c8aef2e688f2677377a3cd234067c470e946e9197929d9b9f8fed81a6774669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8963 Malicious code in common-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 928c83c31f108c60035b2c6c96605de1111ca0ca0faf7fd554e461357801b6cf The OpenSSF Package Analysis project identified 'common-icons' @ 1.0.83 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8962 Malicious code in visa-ui-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd965500f041551c6ece4a137b88df7d7c601228f7e039a8130a8514a48b98e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8961 Malicious code in k0m3g4-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd260efc78494efc57d67f6576d7ae30b8e58e866ee7a3c228692548174c1e19 The OpenSSF Package Analysis project identified 'k0m3g4-test' @ 2.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8953 Malicious code in meditek (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79ebeff786b44dfe1e4d9920b228a143335564879c286690455423f754824a88 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8948 Malicious code in missive-webhooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c542320393405abc1b813877a068a06aa9811a95a509d22bf8a5e95bb4873119 The OpenSSF Package Analysis project identified 'missive-webhooks' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Tracking cloud-fluent threat actors - Part one: Atomic cloud IOCs

Strategies for tracking and defending against malicious activity and threats in the cloud using atomic indicators of compromise IOCs...

MAL-2024-8937 Malicious code in labelv2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0cda1c25c57bcf643d5f0b072d315ccff37c5423681fbd3f6f6970ab021f51a6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8935 Malicious code in tannucolingboys (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis be8167659390a471b016dfb0b25a778b2a77374ac31f845966ea70ce799ca081 The OpenSSF Package Analysis project identified 'tannucolingboys' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8934 Malicious code in @the-df-company/commod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5ef49313b5c6faeeb4fe243f85058ce379b31887177f5dbe49a4dac3252fe7f0 The OpenSSF Package Analysis project identified '@the-df-company/commod' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-8929 Malicious code in smp-imsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a2c37b45dcf00d1c87e46d7fee96a0d5d5736d22bc0094618bea415a79bed4e The OpenSSF Package Analysis project identified 'smp-imsc' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8928 Malicious code in learning_npm1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f3b173b32e267c6a9b7455320bda81f08ce154ad6315aeaea540133a9f0ab232 The OpenSSF Package Analysis project identified 'learningnpm1' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8922 Malicious code in vehicle-optionalproducts-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52513e322c63383065f4e0e5b8b22dbb1452248d372c74fd463402c7179e5abb The OpenSSF Package Analysis project identified 'vehicle-optionalproducts-ui' @ 99.0.0 npm as malicious. It is considered malicious because: - T...

MAL-2024-8938 Malicious code in @energysolutions/mylib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 08f12d3c3e2e99f5bcec121d93fe4ece6a29ff57478e2e93e0cff0d4309832ac The OpenSSF Package Analysis project identified '@energysolutions/mylib' @ 999999999.999999.999999 npm as malicious. It is considered malicious...

MAL-2024-8912 Malicious code in infosnap-secure-family-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e26fd78e593cb831595d3ef036383a3570e155771197138cd43afac672bfe304 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...