MAL-2024-1153 Malicious code in gatsby-theme-deriv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 32ede5793754442e2e56bdb177dea81b15771050ced8976b1958a4eff4cd2b9c The OpenSSF Package Analysis project identified 'gatsby-theme-deriv' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1138 Malicious code in u-workflow.module.common.features (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43c063fa58fdcf0f64acc12e433390c9dc078ab6b6eb6dd773242db454f29a47 The OpenSSF Package Analysis project identified 'u-workflow.module.common.features' @ 1.0.1 npm as malicious. It is considered malicious because...

PT-2024-18471 · WordPress · Simple Ajax Chat

Name of the Vulnerable Software and Affected Versions: The Simple Ajax Chat WordPress plugin versions prior to 20240223 Description: The issue concerns the reflection of unsanitized input to other users, specifically when visitors use malicious names in the chat. This allows for potential malicio...

MAL-2024-1112 Malicious code in abcotv-ads (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b2032a43dcea9b545087dcd1d72c8b8b1d34ecba06d2df5a34e6a463243ece5 The OpenSSF Package Analysis project identified 'abcotv-ads' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1104 Malicious code in lyft-exceptions (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e0290aaa0cb90a501cb0a0b357f32d3e725f6f3a97541cbc2796671ea4e8f60 The OpenSSF Package Analysis project identified 'lyft-exceptions' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1098 Malicious code in geico_design_kit2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb947e32f21c9faa279b825aa5989d3a6fcbe09de00409c630dd824dc5ce42f0 The OpenSSF Package Analysis project identified 'geicodesignkit2' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1093 Malicious code in sdge-it-tdg-dynamicloadprofiles-sempra-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d7a435ca75f0214af0cf902eeb6293bba2778f04c71cc5afd45ac109c0a78c5 The OpenSSF Package Analysis project identified 'sdge-it-tdg-dynamicloadprofiles-sempra-poc' @ 2.0.2 npm as malicious. It is considered maliciou...

MAL-2024-1092 Malicious code in wm-lib-api-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9c48e2ab0480956dd0db4c0bc2e946be8a52112fb31f959900edb9a914f02367 The OpenSSF Package Analysis project identified 'wm-lib-api-error-handler' @ 1.0.2 npm as malicious. It is considered malicious because: - The...

Malicious code in sap.m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15071ba5071ccb3930f175a5e0be10782050c544af995646c8a3141c15c17d51 The OpenSSF Package Analysis project identified 'sap.m' @ 1.52.5 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-1080 Malicious code in sap.m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15071ba5071ccb3930f175a5e0be10782050c544af995646c8a3141c15c17d51 The OpenSSF Package Analysis project identified 'sap.m' @ 1.52.5 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-1079 Malicious code in sempra-npm-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 872da23eea679ab4d72067d48ca21e2f235cb67bd63e176842a5137a873d5f96 The OpenSSF Package Analysis project identified 'sempra-npm-poc' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1070 Malicious code in jitsi-meet-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d00022cc6b75ddc259b9fe60993dbdf646c17b30cce6a76c88798ca229947db The OpenSSF Package Analysis project identified 'jitsi-meet-electron' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-1068 Malicious code in global-min-document (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f31926381530898f76c33bf3a3941e4c37e5866d33fbe1501baa831b6822165 The OpenSSF Package Analysis project identified 'global-min-document' @ 999999999.99.9 npm as malicious. It is considered malicious because: - T...

Malicious code in profectus-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 062a69a64c4e77b2e5cebc7f5d21c239c51139c4d420c9fbf2e616f23ec838a3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1066 Malicious code in dropdownformfield (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2713d5570c40f202d4baa70c5d4b4a5ded51d6375ab052be5eb0a89de9d3e153 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1065 Malicious code in accessibletrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8474de211a93f6609827bb3a4e63a05cba1f2124131efd6a9ddf34edb2f89ed3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ycs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8fcf222dfcf6f0f36588b0c11a3e0fd28bac1b86cccc3eac8afb5f9243afffb7 The OpenSSF Package Analysis project identified 'ycs' @ 3.9.9 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-1058 Malicious code in jaas-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e138921f13c1e6284e20c35908236f156dedf323860b924ccdfda713eb03b8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1057 Malicious code in pcln-event-dispatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 58d0757d5f390b101d520dbcfa438dc8fdf9197eccea3aae851f57a1cb09eeb3 The OpenSSF Package Analysis project identified 'pcln-event-dispatcher' @ 999999999.99.9 npm as malicious. It is considered malicious because: -...

MAL-2024-1055 Malicious code in add-sugar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8c35253404a0c432c7a012459997f522c42254fc055677eab50061c9f4b39edc The OpenSSF Package Analysis project identified 'add-sugar' @ 1.0.10 npm as malicious. It is considered malicious because: - The package...