MAL-2023-8307 Malicious code in narratives-from-tweets (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1570135eff60eea1dfd9ec7b66797d9454373263050b83c8ad90d2b7b37d71b6 The OpenSSF Package Analysis project identified 'narratives-from-tweets' @ 0.1 pypi as malicious. It is considered malicious because: - The...

MAL-2023-8306 Malicious code in liblapack-dev (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 01a9f7fec70ee10cd7862c22e2c8257811997655e86e342b7bf61d0bd2b95154 The OpenSSF Package Analysis project identified 'liblapack-dev' @ 0.0.1 pypi as malicious. It is considered malicious because: - The package...

Malicious code in liblapack3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 74012077041418bce1aed1339b95d0221435cff33db310194f29d9a0c2451e6e The OpenSSF Package Analysis project identified 'liblapack3' @ 0.0.2 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-8292 Malicious code in docupload (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67162d52cf528df828bdd0efdf7165e3f51fbbbb09d41014c1620d8e1aaecd80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8298 Malicious code in shopify-currency-converter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cce5f47f0fb8050c5ba0e74637e692ba095f4628070a3087b67db81de6deca0d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8293 Malicious code in f0-fpti-tracking-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca857aba5d033c511a1378d71e0ac64828687fe8dfef05c287c6d939a148fa4 index.js runs automatically via a preinstall lifecycle hook on npm install and collects host identifiers from the installer's machine — os.hostname,...

Malicious code in f0-fpti-tracking-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca857aba5d033c511a1378d71e0ac64828687fe8dfef05c287c6d939a148fa4 index.js runs automatically via a preinstall lifecycle hook on npm install and collects host identifiers from the installer's machine — os.hostname,...

MAL-2023-8279 Malicious code in webdriverio-browserstack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 558220ecb7cc65dd1c6bd3cb85413d458fb89da42e9ec16e2e1811a252761b15 The OpenSSF Package Analysis project identified 'webdriverio-browserstack' @ 0.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8264 Malicious code in epicgamesnavimpl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c21544e84272de2c8cab4a4d6fbf98fb34810dddf1f196b2e337e84c03302d9e The OpenSSF Package Analysis project identified 'epicgamesnavimpl' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8263 Malicious code in symphony_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c20ea6d79677d372e49128111709f70323ac73cb9e7a7411743d8e39b19aae60 The OpenSSF Package Analysis project identified 'symphonyui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

The Dark Side of Browser Isolation – and the Next Generation Browser Security Technologies

The landscape of browser security has undergone significant changes over the past decade. While Browser Isolation was once considered the gold standard for protecting against browser exploits and malware downloads, it has become increasingly inadequate and insecure in today's SaaS-centric world...

Malicious code in csm27878 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0055598a8a443f1bd67fa612291473dcb36ba6e1c9927df85775eea3d207de11 The OpenSSF Package Analysis project identified 'csm27878' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8255 Malicious code in csm27878 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0055598a8a443f1bd67fa612291473dcb36ba6e1c9927df85775eea3d207de11 The OpenSSF Package Analysis project identified 'csm27878' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in csmqrcode (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7be3c7341134e3f6e8c5e298589bbf69296fe3056e225eb82b91aa3d23f5898a The OpenSSF Package Analysis project identified 'csmqrcode' @ 11.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8242 Malicious code in @ltd2research/tldrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b91e4540f7f53e684e429ddaece0e59adb5e02fb0e24c2faef4200ee61771875 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8241 Malicious code in accounting-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a22d55ca3dd67efe723d098fd88933dec7b4891b055c61248df097dfe348b736 The OpenSSF Package Analysis project identified 'accounting-core' @ 2.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in accounting-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a22d55ca3dd67efe723d098fd88933dec7b4891b055c61248df097dfe348b736 The OpenSSF Package Analysis project identified 'accounting-core' @ 2.1.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in spaceboo-y (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9861de0db14f13361149470204707691f9711304b4ed49c191312836812a955 The OpenSSF Package Analysis project identified 'spaceboo-y' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8221 Malicious code in @ms-mwf/moray (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6f6aa5d1e70a75cd04a649afec90fd43acb9a5ebdbeda194fdb47cd288ecd670 The OpenSSF Package Analysis project identified '@ms-mwf/moray' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8220 Malicious code in @cosell/accountplan (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2a11852a87ae441dfe39ecf58cf593108ae7c4caba3814a4b3ab352b91e350c0 The OpenSSF Package Analysis project identified '@cosell/accountplan' @ 1.0.2 npm as malicious. It is considered malicious because: - The packag...