MAL-2023-1419 Malicious code in test-test-test-leys-check (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1b447a06ae8cd034c08db769374bbc319460cc98a553bfc472d87ca1ef6cc The OpenSSF Package Analysis project identified 'test-test-test-leys-check' @ 9.9.9 pypi as malicious. It is considered malicious because: - The...

MAL-2023-771 Malicious code in serverless-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c89475cfcb2e297c9055323646693ea6dd4a4b4f744b2802c608fdb86f04be92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-9 Malicious code in sagemakertransformers (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c11f5b4aed6b109392ec1e8837e14a1948f90d65986a7555511b0dd2cb2f479 The OpenSSF Package Analysis project identified 'sagemakertransformers' @ 0.0.3 pypi as malicious. It is considered malicious because: - The...

Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1120 Malicious code in back-alley (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83d1eb07b6ba84ecc98bdd4ad2a1313b540e69509c08d8d66f4b2fe54a1986a7 The OpenSSF Package Analysis project identified 'back-alley' @ 1.1.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1177 Malicious code in eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ba3635b5a021d627f0f232cf46f53846cc953c75659700eae5ee919ebfca455 The OpenSSF Package Analysis project identified 'eu.tsystems.mms.tic.testerra.plugins.azuredevops.tests' @ 1.0.0 npm as malicious. It is...

MAL-2023-1124 Malicious code in bitshares-ui-style-guide (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 429c86abce3dc07c32dc57d2f69b0a211675f08c5f2043d0ea8d67210c004995 The OpenSSF Package Analysis project identified 'bitshares-ui-style-guide' @ 1.0.3 npm as malicious. It is considered malicious because: - The...

MAL-2023-1270 Malicious code in postaggingcorenlp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b30a154de5e7685f533a68a9ed3e6b7e0e3e577fb28781fcb408f0ac480e95d The OpenSSF Package Analysis project identified 'postaggingcorenlp' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1207 Malicious code in idcs-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1f9e71c07d690c8293d57afe2530d560684f82b76c844f9904256c1d330fc5af The OpenSSF Package Analysis project identified 'idcs-dialog' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1429 Malicious code in modified_bayes (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1c5711b3c10ba19ca7c68581b9cd246029ba621b35c0371e4a043d69050b9363 The OpenSSF Package Analysis project identified 'modifiedbayes' @ 10.1.0 rubygems as malicious. It is considered malicious because: - The packag...

MAL-2023-1375 Malicious code in libtpu-nightly (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4710fdb2d58063f6a640883c2617fc154d074a9122c261111dd2e2b10a1e9552 The OpenSSF Package Analysis project identified 'libtpu-nightly' @ 0.1.dev20230207 pypi as malicious. It is considered malicious because: - The...

Malicious code in not-a-real-dep (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 784465edafb8e247845de45eb1f9c8d0b19b03706e98e861f1a570732d66cba5 The OpenSSF Package Analysis project identified 'not-a-real-dep' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1304 Malicious code in staging-opbox-web-browser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fbd6d4cfbb58ae5a7f14b26eb9cf8b4f593b5542ada8603e96b5c6edf7ebe211 The OpenSSF Package Analysis project identified 'staging-opbox-web-browser' @ 99.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1182 Malicious code in fkletbbpoc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 125b0aa54538899871c0071ae4b76678012092032ff03d6ad08c4ecf1a2fc7d7 The OpenSSF Package Analysis project identified 'fkletbbpoc' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1257 Malicious code in opbox-seller-shop-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c62594db29ca0473a517e2d3ed643575d938a4d43a58ee4420b2b304b8121b32 The OpenSSF Package Analysis project identified 'opbox-seller-shop-service' @ 99.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1258 Malicious code in opbox-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4711ddc1c31860a921bc52eb8e87d8e43815d791684cedb6686ac77c65cc7125 The OpenSSF Package Analysis project identified 'opbox-web' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in proton-pack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c87e5ff9b7fca2cbd9b8c5f66c8849dd5f06f3e36574d1e902b216d332a207ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1273 Malicious code in proton-account (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis edfb8318aed91ce8eb51e269ae47766d501e4e03c1b95f4327570493b4b1379c The OpenSSF Package Analysis project identified 'proton-account' @ 99.99.999 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1342 Malicious code in webpack-cli.legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 22737261df7f74819a3f3f968e6516db5e37f6621827d6148b290f7650b9992f The OpenSSF Package Analysis project identified 'webpack-cli.legacy' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1343 Malicious code in webpack-dev-server.legacy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85cd0dbb01e0045658eb423c4580a09f07f36ce5af1689227f99e72348cda4a6 The OpenSSF Package Analysis project identified 'webpack-dev-server.legacy' @ 1.0.0 npm as malicious. It is considered malicious because: - The...