4240 matches found
MAL-2023-1090 Malicious code in @ms-atlas/datastudio-diagnostics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3f339799f51093d5209c8cdce0977b24869016867c813f0abcfc5143e81f921 The OpenSSF Package Analysis project identified '@ms-atlas/datastudio-diagnostics' @ 0.2.10 npm as malicious. It is considered malicious because...
MAL-2023-1312 Malicious code in synthetics-recorder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e132b465279df9b9432ece358404299922e0051907132baf848320447a551489 The OpenSSF Package Analysis project identified 'synthetics-recorder' @ 9.9.99 npm as malicious. It is considered malicious because: - The packa...
Malicious code in synthetics-recorder (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e132b465279df9b9432ece358404299922e0051907132baf848320447a551489 The OpenSSF Package Analysis project identified 'synthetics-recorder' @ 9.9.99 npm as malicious. It is considered malicious because: - The packa...
Malicious code in icoreact (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c03ec7b8267dc8690840c8f949e0a07962479ed8473f6c34782de1a1942aa507 The OpenSSF Package Analysis project identified 'icoreact' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1206 Malicious code in icoreact (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c03ec7b8267dc8690840c8f949e0a07962479ed8473f6c34782de1a1942aa507 The OpenSSF Package Analysis project identified 'icoreact' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in calfirebof.web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e25233bbab089a468ee98d824050f903357440485e2fce9fb4291afdec427485 The OpenSSF Package Analysis project identified 'calfirebof.web' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1087 Malicious code in @metronetinc/react-component-library (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60618ba400c79770b18a43c36d0b3b9723c5f4df204ac012d6aea96d17de5bdd The OpenSSF Package Analysis project identified '@metronetinc/react-component-library' @ 9.999.8 npm as malicious. It is considered malicious...
MAL-2023-1101 Malicious code in @recordedfuture/rf-native (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aac1388d71025ac7f2f7dea84dd37f82d5d7392e8714f56bfaa66803982bb1c3 The OpenSSF Package Analysis project identified '@recordedfuture/rf-native' @ 2.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in scbe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0038adb669e3dbac6bc53a3f8c60a1ee4e2acdfcf28ab8c419e8b39638f14a9 The OpenSSF Package Analysis project identified 'scbe' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...
MAL-2023-1287 Malicious code in scbe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e0038adb669e3dbac6bc53a3f8c60a1ee4e2acdfcf28ab8c419e8b39638f14a9 The OpenSSF Package Analysis project identified 'scbe' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...
MAL-2023-1430 Malicious code in naveen4gem (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f434b9b8cbf657627010562fe56245ba16cc930cdd82258625fd29bab68205c The OpenSSF Package Analysis project identified 'naveen4gem' @ 1.1.0 rubygems as malicious. It is considered malicious because: - The package...
MAL-2023-1431 Malicious code in naveengem (RubyGems)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12a3ed7380fdb815c2f8c5a086b33d516acc0bbdaab4d4df8203efed20ae348b The OpenSSF Package Analysis project identified 'naveengem' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...
MAL-2023-1162 Malicious code in dontsweatthetechnique (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bbda5728889893ceed46e14cad0f90a4e884b8e92aed8cc3a824288c2e16a5db The OpenSSF Package Analysis project identified 'dontsweatthetechnique' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2023-1103 Malicious code in @region-lib/helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0f84da1cfecc0e380a493053daa5d6240c342559aefe6ff74ccb3ef6e66ac7d0 The OpenSSF Package Analysis project identified '@region-lib/helper' @ 2000.0.1 npm as malicious. It is considered malicious because: - The...
MAL-2023-1323 Malicious code in trochilus (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6895d1063758093bf21294cd9edbba16c2e957fd931d17008cc6d962c8992b4 The OpenSSF Package Analysis project identified 'trochilus' @ 50.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1077 Malicious code in 1password-postman-integration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93be26c7bf7ce939a783f5c98c26ecd585430bdb1c993cf3f78dd213a316a058 The OpenSSF Package Analysis project identified '1password-postman-integration' @ 1.0.0 npm as malicious. It is considered malicious because: -...
MAL-2023-1286 Malicious code in salesforce-ux (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf2a69a3613a2fc56dfb5d3eb3f2b0289bf2f9c8b0db94caf8d754699c12d175 The OpenSSF Package Analysis project identified 'salesforce-ux' @ 1.6.1 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1154 Malicious code in directus-codestyle (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a40b79e42e3f1936af95ffd63d1c7652667a9f770625849aa7698f2bfcfca8e1 The OpenSSF Package Analysis project identified 'directus-codestyle' @ 1.3.1 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1104 Malicious code in @rustore-web/config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b585e96458bb3cf6eb082211fc6fa2d3da3a32d3dd1a9dd04ec13b7e4f97d8a5 The OpenSSF Package Analysis project identified '@rustore-web/config' @ 2.1.4 npm as malicious. It is considered malicious because: - The packag...
MAL-2023-1407 Malicious code in servantcord (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a573def8d25965b25ab7e80b187bc35973c3015d0a23b2c0f8298d800d97a1a2 The OpenSSF Package Analysis project identified 'servantcord' @ 1.0.2 pypi as malicious. It is considered malicious because: - The package...