MAL-2023-1536 Malicious code in react-vis-master (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6b50bcb70f028287514bfdeca61e58907a79b80687a92a949e45abc009d38974 The OpenSSF Package Analysis project identified 'react-vis-master' @ 1.12.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1537 Malicious code in testtttecsc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b472556a0c7f3ae25ce3f656709d034c747b1f7c4158abf0850ed31061962e72 The OpenSSF Package Analysis project identified 'testtttecsc' @ 1.11.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1507 Malicious code in matomo-screenshot-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc044c397b025c460ce571308d09c4bbbba7869abcc04f319cf219796f7a0666 The OpenSSF Package Analysis project identified 'matomo-screenshot-testing' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1506 Malicious code in securitytxt-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 81dbfb4e2051327cc68f17d9de11e7e30f12956c5d402360c453029a80a59221 The OpenSSF Package Analysis project identified 'securitytxt-worker' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in owncloud-js-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 26163abe3e5a983c952c08703d6b6763543c0fc989b54027001520a78d7b145a The OpenSSF Package Analysis project identified 'owncloud-js-dev' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in kasms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14c5473ed9f03eb3f97abf8cfe3a81e0296f61439e1a450546557140a154e714 The OpenSSF Package Analysis project identified 'kasms' @ 1.0.207 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2023-1494 Malicious code in kasms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14c5473ed9f03eb3f97abf8cfe3a81e0296f61439e1a450546557140a154e714 The OpenSSF Package Analysis project identified 'kasms' @ 1.0.207 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2023-1492 Malicious code in github-deployment-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbecfc86b0734310a1e38d002a298fffa75da0631b0309309bd26ad98188e97a The OpenSSF Package Analysis project identified 'github-deployment-action' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1493 Malicious code in postman-zendesk-support-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e3501f72f7b7c1700a90f7ad5e3a55cd2462c210637c68dc75f9d336e9bf0063 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in f0-data-constructor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fc7101aab5c7172a2ab40e0e1ce62dbd251d5301f5efb5f4c30cab065bb5cd The package's preinstall hook auto-executes index.js on npm install. The script imports https and os, collects os.hostname, os.platform, os.arch,...

MAL-2023-1491 Malicious code in f0-data-constructor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fc7101aab5c7172a2ab40e0e1ce62dbd251d5301f5efb5f4c30cab065bb5cd The package's preinstall hook auto-executes index.js on npm install. The script imports https and os, collects os.hostname, os.platform, os.arch,...

MAL-2023-1474 Malicious code in infima-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bcc026f6dfc120957923bfddc830c588da513981ea2aed8e761a04719a8454bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1483 Malicious code in spark-math (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b69ba236f6e65c975d31bbd86381ca28f0abc32e518869dbc220b8cfe2c526e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in micro-module-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 84ee1d3926358ce600863901c33d5bbd13bbc4703092dcfd628bf0e6958b256c The OpenSSF Package Analysis project identified 'micro-module-test' @ 40.32.2 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1472 Malicious code in micro-module-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 84ee1d3926358ce600863901c33d5bbd13bbc4703092dcfd628bf0e6958b256c The OpenSSF Package Analysis project identified 'micro-module-test' @ 40.32.2 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-1452 Malicious code in syns-knox-xss-allwhere (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3c6b6e1a22a56620b309d722c59897f1e6d2225c56e8faafc1b87beefc26750 The OpenSSF Package Analysis project identified 'syns-knox-xss-allwhere' @ 1.0.0 pypi as malicious. It is considered malicious because: - The...

MAL-2023-1450 Malicious code in blockly-mirror-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d12c57048b068cdb5e63126d40fe5ecf1a822c9562ff7657ada5e4862b2be7 The OpenSSF Package Analysis project identified 'blockly-mirror-demo' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

Malicious code in blockly-mirror-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02d12c57048b068cdb5e63126d40fe5ecf1a822c9562ff7657ada5e4862b2be7 The OpenSSF Package Analysis project identified 'blockly-mirror-demo' @ 99.99.9 npm as malicious. It is considered malicious because: - The...

Malicious code in puppet-module-posix-system-r3.2 (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 835ce606cd37fa823a80a445ab30dce0ec0005af3a78f9ed7a8d35d63db99474 The OpenSSF Package Analysis project identified 'puppet-module-posix-system-r3.2' @ 1.0.0 rubygems as malicious. It is considered malicious...

Malicious code in eslint-config-ironfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3c131e05243f24fb2099561dacc47fb3017389f480a323ac185ed3271a6907de The OpenSSF Package Analysis project identified 'eslint-config-ironfish' @ 99.3.0 npm as malicious. It is considered malicious because: - The...