MAL-2024-10553 Malicious code in autolink-jira-issue (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d899824dec6a9efaddf4482f495ca1b557fc0ec18d4371e0214c6397fd95ee71 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10557 Malicious code in com.immutable.orderbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f795b01833e389a9a9ebe458382a107659f9bcd99fc298823315bd263d617ff3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10556 Malicious code in com.immutable.api.zkevm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9abb9b0d7d0aaebe4c9072367919fa4d1ffdf77edb53d312432695954d05b599 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10560 Malicious code in immutable-axelar-bridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d36818770ca9a97d6b714a041348e2e44a341e8d2f017aff4fb1dc912d185e41 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10832 Malicious code in affinequant (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 afe878283ed977f017256fda3c32fdd8efea0e4c50335d528933e9ea99dcf2a9 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10491 Malicious code in tcms-malicious-package-test-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecbe4f00487fb7bbadba6c2153a5c851ce1c61ce032ba09f3d69c53b49bd0f48 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in x2vmlgml (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 83c3524199594df2a9cfa9a2fc3cb16b03e48c2e6abd67c8fc06b7a5d92d75dd A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-10386 Malicious code in tcms-malicious-package-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ecdca9c2ba1dc4fbd690b4af252ead04f9b81254e6951c5688da537a34156b45 The OpenSSF Package Analysis project identified 'tcms-malicious-package-test' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...

MAL-2024-10309 Malicious code in rentez-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d38f5182bdac1a9d1dc8a7edd04bf4887e39416ac443361fbe2b4de7341c0360 The OpenSSF Package Analysis project identified 'rentez-docs' @ 6.6.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10243 Malicious code in eslint-plugin-evo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04325a96cfbff0b91342138baf94c31960794bb6b22d270ae933581f0da5df5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10244 Malicious code in roboter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa6fc5a9f3575bd0e3c1ad1457b0a23602a4637d3d248679905a79d5d998e607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in edtttsenuity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0205b986eabec98232310d419e800ffe7ca4a2de5e59c843b6eb7bda19c7800 The OpenSSF Package Analysis project identified 'edtttsenuity' @ 99.99.223 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9448 Malicious code in mcroutingservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15262556e3b11cafe3a148da26c5ca6a92e8ad98b01bf2f4c5deb6a26cdda697 The OpenSSF Package Analysis project identified 'mcroutingservice' @ 4.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9453 Malicious code in mybasicauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9f167c8091f34ef534b8a4fd6d46f2f09c2a268673734c1a7cf37a1ab4218153 The OpenSSF Package Analysis project identified 'mybasicauth' @ 1.0.13 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9297 Malicious code in viajemos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1eaa4f7f65afd8ce40ebdcb66c5d40f5a10adf26157fb493c4628b2c5940d843 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9272 Malicious code in rei-browser-shim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ffe49e96d371fc539149fcb75a89d544ef18735fa7563a7c5aa1d05d1d4650db The OpenSSF Package Analysis project identified 'rei-browser-shim' @ 100.99.99 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-9110 Malicious code in sd-template-main (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1d800f01a52aafc7bee8ab45032560696e9e36ca3c902a4adc7d1245294fc0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9066 Malicious code in nf-cl-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4a07e531cde3becef826740710d90cfb37d46917ae9a633d794a641b4f04c737 The OpenSSF Package Analysis project identified 'nf-cl-logger' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9065 Malicious code in axp-product-ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5285fb9646b0435fb4ae3204b5975277243e149fc95c187c5c65e2fa0609389e The OpenSSF Package Analysis project identified 'axp-product-ducks' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9043 Malicious code in djangopeopletest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6617a6a6229b2e0ec3df4bda1a00109bdbc7aaff20d0fb0c305a489c9425734 The OpenSSF Package Analysis project identified 'djangopeopletest' @ 2.1.1 npm as malicious. It is considered malicious because: - The package...