4240 matches found
Malicious code in myattenuator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea4131b4858e840e02fe12b2a8719cfe85598245a84e842b917dd595ea1af4e4 The OpenSSF Package Analysis project identified 'myattenuator' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1241 Malicious code in myattenuator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea4131b4858e840e02fe12b2a8719cfe85598245a84e842b917dd595ea1af4e4 The OpenSSF Package Analysis project identified 'myattenuator' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1305 Malicious code in stateful-fastclick (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5a06e5b71a04fa67ca20937e8e438c638644db87d181799a046d22c568e6c4c5 The OpenSSF Package Analysis project identified 'stateful-fastclick' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1353 Malicious code in zsbpwebsdktest3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a25d6ab5c8c52c4020f38d78237f6c953a826c3e8abc287370befada0727c50a The OpenSSF Package Analysis project identified 'zsbpwebsdktest3' @ 9999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1143 Malicious code in compositionupdate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 609e73b696d2a84c8c2169afde78694231815b46be300710ddf913fed7c63d1b The OpenSSF Package Analysis project identified 'compositionupdate' @ 88.8.8 npm as malicious. It is considered malicious because: - The package...
Malicious code in compositionupdate (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 609e73b696d2a84c8c2169afde78694231815b46be300710ddf913fed7c63d1b The OpenSSF Package Analysis project identified 'compositionupdate' @ 88.8.8 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1320 Malicious code in texture-allocator (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 295589602f0c0baf1ed21fb915589780ccee883cf28e0458728a211b840b4bae The OpenSSF Package Analysis project identified 'texture-allocator' @ 99.99.80 npm as malicious. It is considered malicious because: - The packa...
Malicious code in eslint-plugin-indeed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...
MAL-2023-5 Malicious code in eslint-plugin-indeed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cd3cf0dfdda3ea0bf705d385efb05c56b971a408c4a0dceef3771d2e474a33e0 The OpenSSF Package Analysis project identified 'eslint-plugin-indeed' @ 99.99.9 npm as malicious. It is considered malicious because: - The...
MAL-2023-1297 Malicious code in skyscanner-themes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4e80c6a572898c77cc6e5b4c0266cc4805778ec35102f514669accd32b0664f0 The OpenSSF Package Analysis project identified 'skyscanner-themes' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in ladoputi-static (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1448356c200aec8d8b1197163159b7b15288c3629fc0a3ec2d33dd82c06725ac The OpenSSF Package Analysis project identified 'ladoputi-static' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1155 Malicious code in dist-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ff355bd5f2422ce630aeb0652869d4bdaa8f3f18cf576fc60a76588f3acf36b4 The OpenSSF Package Analysis project identified 'dist-web' @ 99.1.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in flp_hk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b67d12ada5f46c9de6e13923538f25159e524761b2188821fd2be3831afd8cc5 The OpenSSF Package Analysis project identified 'flphk' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...
MAL-2023-1291 Malicious code in scuntest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f42cc62b8cee0d48d9ee1455debbb923baaab65c1fd45a70a726d6053cb36086 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1351 Malicious code in zsbpwebsdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bf63d69adabe277a69df70ff7c39dd42b81fad4f512f8204458dc438d7edfb7d The OpenSSF Package Analysis project identified 'zsbpwebsdk' @ 9999.9.9 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1422 Malicious code in yc-as-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9df89f5f0260f38e93635cc5df99e7ea267d4c07f25e1446a49c08fdf21befe7 The OpenSSF Package Analysis project identified 'yc-as-client' @ 11.11.3 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-3 Malicious code in @hyperion-util/script-loader (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fabcfd39cc4468aaddf92dd77dc548149fa6f7f8d09de7dc5af550bf8fbc2b81 The OpenSSF Package Analysis project identified '@hyperion-util/script-loader' @ 77.77.79 npm as malicious. It is considered malicious because: ...
MAL-2023-1404 Malicious code in roblopython (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62fff9aab2ab176cbb2e29cca29b5592fe22be3c0f020fa57bd4a931af0a40f7 The OpenSSF Package Analysis project identified 'roblopython' @ 2.0.15 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1306 Malicious code in store-js-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4462b056f6144f0a42e19147fcc9c5a0277e45631c26bebad88d24513995b773 The OpenSSF Package Analysis project identified 'store-js-sdk' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
Malicious code in store-js-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4462b056f6144f0a42e19147fcc9c5a0277e45631c26bebad88d24513995b773 The OpenSSF Package Analysis project identified 'store-js-sdk' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...