MAL-2024-10895 Malicious code in some-random-package-33 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 56e2adbf4dfb01600fc7df2c4a270d862b1b575c7040142ae070c7bf990d671e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-8025 Malicious code in puffioner131 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03e7420ebe17c5b3feef69b274c7b6e57ed2e6913e19a561d7040e3b48e041a2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-36 Malicious code in rtpoc1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6fec3cb3c9354af29d7edbc82703c0fe7406084014bd610bd383ee2795d324ca Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in subdomainer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be979ecd7261fc996ff3007675ba6e59cbdab8da999ab44c937adb5b1a609724 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in hello-wordl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 238c137f1939d99c855ef5fedf6f16b67ac8fcd9087d80270475d3eeff8e8c65 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-10236 Malicious code in blab111 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bc1ea66b7bd97f1590f64319f168a1e5ce5f257bf47595de26247cc07a48f80c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-7802 Malicious code in @mentoring-services/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6248cce7fe3e50ce8c9fe940f959d883f287bff1a15d23813fa4dad7f960a486 The OpenSSF Package Analysis project identified '@mentoring-services/sdk' @ 10.20.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7803 Malicious code in feedback-html2canvas (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 59673c0fc4701541ff9cf2002ba260a6cb6429a2b8ed7bd4398362bab5b421b1 The OpenSSF Package Analysis project identified 'feedback-html2canvas' @ 10.20.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-7795 Malicious code in @vertiv-co/ui-library-nextgen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffbf749ac60481466ea1b80f8cdcf3d84df099b6496876a765054477889570d6 The OpenSSF Package Analysis project identified '@vertiv-co/ui-library-nextgen' @ 10.0.2 npm as malicious. It is considered malicious because: -...

MAL-2024-7796 Malicious code in @vertiv-co/viewer-service-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a42df7da8768f315d6d12eb06fa799e0781561526ae3c71ad21f34b1dfe06411 The OpenSSF Package Analysis project identified '@vertiv-co/viewer-service-library' @ 10.0.15 npm as malicious. It is considered malicious...

MAL-2024-7793 Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7783 Malicious code in chromestatus-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3f0ae839e77574e6fbdeb08227dfe2e2d3be958d34456a8cc4df440988db1e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7781 Malicious code in angular-material-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc6ec3d00f5ac0565644d0b1fce06bf68473a14b48df88761451345f12c7475c The OpenSSF Package Analysis project identified 'angular-material-panel' @ 1.1.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7840 Malicious code in testjsonn2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d75d52ae07c9c9e2e6b773f2806c66631dd764da793bac0559e65bc4d0e7f66 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7839 Malicious code in testjsonn1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

MAL-2024-7778 Malicious code in oj-odcs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6c15cc75636529a58d1e70b3731207bdde080965ec886c0fa3a651f3d49f58a The OpenSSF Package Analysis project identified 'oj-odcs-common' @ 3.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in fireauth.args (npm)

The package exfiltrates data to an oastify domain. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c601f7d41a9166b7e84595a25e727e5256c0962af730ee336a07eac2b1e7fe40 The OpenSSF Package Analysis project identified 'fireauth.args' @ 71.69.69 npm as malicious. ...

MAL-2024-7774 Malicious code in fe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f10193d263c551e806779906e66b796c66043d73893719ea555b3c822b27adc4 The OpenSSF Package Analysis project identified 'fe-bootstrap' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7772 Malicious code in marvinjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965b7b4455eec757889260ad7d11671ee747f1d78f5ccca323303d223f246c43 The OpenSSF Package Analysis project identified 'marvinjs' @ 5.5.6 npm as malicious. It is considered malicious because: - The package...