MAL-2024-22 Malicious code in stupidrara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3893054db7f136842c9eb85d9d6c2693ee9afa0f397ef3a30c14736aae381261 The OpenSSF Package Analysis project identified 'stupidrara' @ 0.0.0-jqNHd5ZlNt7p7qpN npm as malicious. It is considered malicious because: - Th...

MAL-2024-21 Malicious code in casino-prismic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 906aeb8612a57f084f489c6478da61b9c148272104fed2d5838a07b97704cd26 The OpenSSF Package Analysis project identified 'casino-prismic' @ 4.6.8 npm as malicious. It is considered malicious because: - The package...

MAL-2024-3 Malicious code in hubl-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c48b757cf4e86cc97abb28765fdf3f0a2205e99bbcf856ec3904b7e02038fea0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2 Malicious code in @cartus-core/cartus-common-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 00ecedfab923e26d9afa1c15157b18d4f9662f062ffec7f4ce93ece0426eeeda The OpenSSF Package Analysis project identified '@cartus-core/cartus-common-ui' @ 11230000951.0.1 npm as malicious. It is considered malicious...

MAL-2024-1 Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

MAL-2023-8775 Malicious code in ngx-ndbx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b85b4ba8a7146a1450ff0a1cc8b119bda90a838d67b93d8ad4f080551bfe002e The OpenSSF Package Analysis project identified 'ngx-ndbx' @ 18.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8776 Malicious code in discord.js-self-v22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 672d9ccd18153a9163f1f9a63ec5d765f412cf86a198d526fb04ecc5aa6eab3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8774 Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8759 Malicious code in spectrum-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f2eb941fc5a07c41506c9bdc68d1b469aad8f8b70b2258d975d0a6255516c5f9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mux-leverage-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b12623ebfedef36fcab6ff1f92426346cafe3c214979943b5a2be849cf35a9d3 The OpenSSF Package Analysis project identified 'mux-leverage-protocol' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8747 Malicious code in mux-leverage-protocol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b12623ebfedef36fcab6ff1f92426346cafe3c214979943b5a2be849cf35a9d3 The OpenSSF Package Analysis project identified 'mux-leverage-protocol' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8746 Malicious code in @push-web/tinkoff-push-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e166f22b1c96798bb96d367a25191de8ef60f156cf6cfba086261e66c53609a4 The OpenSSF Package Analysis project identified '@push-web/tinkoff-push-web' @ 2.5.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8745 Malicious code in @pkg-m/m (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a729a302e12ce9d988b8cd980f21cbf38d7e40262fdc86d5d7a0bbc7427e5635 The OpenSSF Package Analysis project identified '@pkg-m/m' @ 1.3.9 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8744 Malicious code in formated (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 469915f0cc096d71a5ad3349a9e1203ffbdbd158fcb529c064aca57d2dce22e8 The OpenSSF Package Analysis project identified 'formated' @ 0.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in finalact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 65ae4f51ac0f42175a709c00e1fa248d12861a7d64bd828cfce2ab35f6a6c106 The OpenSSF Package Analysis project identified 'finalact' @ 1.1.3 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8769 Malicious code in richcolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 50d5904bd379a75fd43115d7339df3d79f87ec691026774160b15b8632a9f8ae Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

MAL-2023-8742 Malicious code in myservice.web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5e7166b9d2dc785b619a4e36f5aeb34e44716a8d8c0fc3b31771358e77d7399 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8737 Malicious code in riskex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 221585b9da0150b32bdbd437dbe0b91deb53f4974b219b2215d642e2565439e9 The OpenSSF Package Analysis project identified 'riskex' @ 0.1.0 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2023-8735 Malicious code in fe-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3eed6012c5576169a48a200a9b4127c89b4c8e96449f17276d6e108aef5f1a13 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8734 Malicious code in next-id-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...