Malicious code in igen-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1466603860464da54a294afe059b81e39290c19fcf8bfedaca8101cda9d63c76 The OpenSSF Package Analysis project identified 'igen-ui' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7906 Malicious code in @adidas-data-mesh/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7903 Malicious code in gdpr-cookie-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4b030241c0f342d263d8d7bb420da387e10189d78cc0201bb34cd2ac047d6764 The OpenSSF Package Analysis project identified 'gdpr-cookie-consent' @ 3.0.6 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-7900 Malicious code in @taxify/trippricing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea65d71551b4d01fb99a1bfe5236b0d5c80c0b566ae60d044b71857883f17b21 The OpenSSF Package Analysis project identified '@taxify/trippricing' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

Malicious code in @taxify/trippricing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea65d71551b4d01fb99a1bfe5236b0d5c80c0b566ae60d044b71857883f17b21 The OpenSSF Package Analysis project identified '@taxify/trippricing' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7896 Malicious code in nvmfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147e71ec4a806f079f678e7df61fa161680442319b62f425a34e7e8bd87b1e85 The OpenSSF Package Analysis project identified 'nvmfix' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7894 Malicious code in httpsearch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e64993dc2fc1fcf09ccd51e2f05f711cd08217f3f32fe72847a0e545ab39199 The OpenSSF Package Analysis project identified 'httpsearch' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7873 Malicious code in md-progress-circular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8452da64b993f8adad40197107a47602421aecb7bc71f7b4fae5560a8429552e The OpenSSF Package Analysis project identified 'md-progress-circular' @ 100000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7872 Malicious code in @adidas-data-mesh/common-aws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7ce6b2f5a21d37c95f132da06bc595d120ec7c4aed20d1d4d517a51d85db6d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7858 Malicious code in kekepaketti-git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe3fe591280b7e540d3769aca60a5a18013d4081d1fc8006f5416636354c0097 The OpenSSF Package Analysis project identified 'kekepaketti-git' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7827 Malicious code in byted-ucenter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dcd762c1705ab2397eb3a62b846f255e15a467f1913fade5a71de9b93d916fe6 The OpenSSF Package Analysis project identified 'byted-ucenter' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in bb-ui-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8398af17925a65881b1e463a1cbc606615814d86f9a5bab0db801d391bf6210a The OpenSSF Package Analysis project identified 'bb-ui-tools' @ 1.2.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7825 Malicious code in bb-ui-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8398af17925a65881b1e463a1cbc606615814d86f9a5bab0db801d391bf6210a The OpenSSF Package Analysis project identified 'bb-ui-tools' @ 1.2.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7823 Malicious code in usaa-modal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 737879d1d600ff1a2162645b8e3951f8f7f8f9c3494b052c5f28eef84339f1a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7822 Malicious code in usaa-message-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8bf3238e942e0b80b48645634f7548320e2fab682269d38213ec514a47691a97 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7811 Malicious code in ent-file-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e476e9a95e121c935215443a2069d17764649684cdf226b5d429ea50a9c8c422 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow logins through Googles "Sign in with Google" feature...

Malicious code in cugraph-dgl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6c1f145fd51ee7737cb44e28b07d4ec3bfe53f4a8aac51d0b8bce58ef8bd71f7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-10895 Malicious code in some-random-package-33 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 56e2adbf4dfb01600fc7df2c4a270d862b1b575c7040142ae070c7bf990d671e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in quizdom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b6e87a0fb56928d5946cb4cff73f2dd9a9ef6eda0d943f74d7f0c4333df8be0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...