MAL-2024-1591 Malicious code in ing-feat-lu-luxtrust-stick-authentication (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e84b6fcb318d2b4cf4fc650d67ffb94a0622eb47d6b88e8662bdb6b2dc62930 The OpenSSF Package Analysis project identified 'ing-feat-lu-luxtrust-stick-authentication' @ 200.0.1 npm as malicious. It is considered malicio...

MAL-2024-1567 Malicious code in cvsr (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1dca03039860936ed84ad166255f648867de3e96266b00da0234c232f24f16a The OpenSSF Package Analysis project identified 'cvsr' @ 2.2.1 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-1562 Malicious code in aws-logs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4707229414d50f1284c7a7b64169463a7c7ca779faf42df6b059947dfd1b79eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1560 Malicious code in pwnkunwar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5f9675a84c2761533cd05e6f893b3df1e793d224ed0a0cc1548432bc75273a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1558 Malicious code in cosma-ui-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 49388262dd0b3d40b1f426a488f94937d409f2ce2053702f81a099fa8ed3b3c2 The OpenSSF Package Analysis project identified 'cosma-ui-icons' @ 9999.999.3 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1557 Malicious code in glamorous-codemods (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a6ea39de6911785f412a5a42905522010930dec6afece74458f8b4859a0fce5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1554 Malicious code in hybrid-custody (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 13a1bb06f9aa541c5e1bd154fad7fb2a739cf5cbec54e7d3cd3e50d62439520d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1550 Malicious code in vue2-webviews (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95a66e858fcc284e27c0e0ac5e2d76de3b0f6c670ac21a185369832d45f40f5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1537 Malicious code in e2e-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc0de9f1d67d84da5e112a98d424fc366b573aa24bc68ac638ae8fdab9ef1f9 The OpenSSF Package Analysis project identified 'e2e-frontend' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in client-onboarding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 762eda8c988435ad6b160c429812de5a603401f5a6463f37bb48160ba53305b6 The OpenSSF Package Analysis project identified 'client-onboarding' @ 7.7.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1532 Malicious code in client-onboarding (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 762eda8c988435ad6b160c429812de5a603401f5a6463f37bb48160ba53305b6 The OpenSSF Package Analysis project identified 'client-onboarding' @ 7.7.7 npm as malicious. It is considered malicious because: - The package...

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

Cloud computing and analytics company Snowflake said a "limited number" of its customers have been singled out as part of a targeted campaign. "We have not identified evidence suggesting this activity was caused by a vulnerability, misconfiguration, or breach of Snowflake's platform," the company...

Snowflake Recommends Customers Take Steps to Prevent Unauthorized Access

On June 2, Snowflake indicated a recent increase in cyber threat activity targeting customer accounts on its cloud data platform. Snowflake issued a recommendation for users to query for unusual activity and conduct further analysis to prevent unauthorized user access. Users and administrators ar...

Malicious code in wdio-api-client (npm)

This package is considered malicious because it communicates with a domain associated with malicious activity and the package executes one or more commands associated with malicious behavior...

MAL-2024-1398 Malicious code in drata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 646cbea8c3285f55f7f26b096cd9a63f91fdf4c4b06370aa92226ea3316bebba The OpenSSF Package Analysis project identified 'drata' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-1396 Malicious code in numberpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e10120613afbbf32d487584c68eaf1ae7f4fc0674f1f119d86beae630a3b9070 The OpenSSF Package Analysis project identified 'numberpy' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1397 Malicious code in reqwestss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b49654324e091538657038a1288d05e2879c02d73bec38baeae681b0a26f5b9 The OpenSSF Package Analysis project identified 'reqwestss' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1395 Malicious code in pinyin-pra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b8720c87d902e268ccf6e9db13f00285998cf35b280a6851ef9c3c23b3f0d6b The OpenSSF Package Analysis project identified 'pinyin-pra' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1393 Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flexfone-reseller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18122a6d33435c1fb53b974e49237f471236504fef75bb09e9f0fb41c399a463 The OpenSSF Package Analysis project identified 'flexfone-reseller' @ 100.0.5 npm as malicious. It is considered malicious because: - The packag...