MAL-2023-8214 Malicious code in circus-amd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97f06ccac9689a5713832cbc65421f112f77a06d2b871ed73d73d7008828e0b9 The OpenSSF Package Analysis project identified 'circus-amd' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in test-package-ings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c7e6330e4c9a50f2df87dcf36790eeb27d1642ecfd882b3a09774d594c03e764 The OpenSSF Package Analysis project identified 'test-package-ings' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in not-a-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f65b9ef7e604f803f7ac9a09d7948911e9cde5f1033f969f2438c8422d48dd22 The OpenSSF Package Analysis project identified 'not-a-math' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8120 Malicious code in @healthbridge-design-system/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 67a89e843273447a99a5bf30226772af73acc28ebaa30abad7579f363b87e848 The OpenSSF Package Analysis project identified '@healthbridge-design-system/components' @ 1.0.0 npm as malicious. It is considered malicious...

MAL-2023-8115 Malicious code in mfp-food-diary (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 922a2a2aa1e588af220ee7d7266ea604a14e5dfa4c43ef09d3248c3d3adc1250 The OpenSSF Package Analysis project identified 'mfp-food-diary' @ 0.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8112 Malicious code in producer-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b44a983bac4bf4a84c490b2164cbf0dddd7dadf964ab05e400ae579c5c8c50b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8110 Malicious code in adidas-data-mesh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cdd001e6013b356683b2fea45497d02787519396582fbe22102e0618a79380fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8103 Malicious code in sharinj-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c38a5716c52678eb97b3b338a62f683268c28460657955b8ef607ef45c57a8cf The OpenSSF Package Analysis project identified 'sharinj-test' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8097 Malicious code in purplebricks-administration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 166a338cbf2061c2c522db795a33313847ac718197150d27111861792523592c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8064 Malicious code in @get-bridge/bridge-string-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e69ac01e87147a835e5ab4045ff640d7fa9d2eb636aeb12eef6e1fc1577d021f The OpenSSF Package Analysis project identified '@get-bridge/bridge-string-utils' @ 99.99.99 npm as malicious. It is considered malicious becaus...

MAL-2023-8063 Malicious code in npm-random-gen (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e52ede67a495176f0c0e0501c905f88aca3d270ae33cea9490c1f1dfe9bcef8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7993 Malicious code in testingoli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 195be366acb384abf4322d56ed3ac6985d510e4aea1a4c6157fd8a2fbd9c5bc0 The OpenSSF Package Analysis project identified 'testingoli' @ 1.2.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7992 Malicious code in pingserver-test.01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d1b45d47d16b0b11b03d83b5b03c34f73980a4e584b35227fbb1359f69c1bbe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7988 Malicious code in metronome-synth-info-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e99092c601ede7db26a42e21544d65cff430ba4d36d1a76232973801b8d3fec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7979 Malicious code in visual_components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7289e2b3846c5d4eacbe709a4bd08a2e48688e587b810b9535c2275275dd2497 The OpenSSF Package Analysis project identified 'visualcomponents' @ 1.0.13 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7960 Malicious code in wallet-watch-asset (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01675c298edf41b4d5fe21203170b72f5e72730d4f4fc10d9714a6a8fe277408 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7957 Malicious code in nequi-aws-sqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ff694733f4579adcceb8730aad479c9eb3d94bdd29c2a1f7e0519810328c30f The OpenSSF Package Analysis project identified 'nequi-aws-sqs' @ 0.3.0 npm as malicious. It is considered malicious because: - The package...

Malicious npm Packages Aim to Target Developers for Source Code Theft

An unknown threat actor is leveraging malicious npm packages to target developers with an aim to steal source code and configuration files from victim machines, a sign of how threats lurk consistently in open-source repositories. "The threat actor behind this campaign has been linked to malicious...

MAL-2023-7956 Malicious code in sb_chatbot_ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 962d49e68e611a6b10b1a3d716d60661cabfa0b0b8d76f43ba0e489e5c20f581 The OpenSSF Package Analysis project identified 'sbchatbotui' @ 11.11.11 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7945 Malicious code in apirsagenerator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f51b19a4947481fd079e1c85356977c4b103a7bde3938185a453b35db4f94ff4 The OpenSSF Package Analysis project identified 'apirsagenerator' @ 1.3.7 npm as malicious. It is considered malicious because: - The package...