MAL-2024-7537 Malicious code in sap-all (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 20cbad827bfae9106b2c0350da02d8061281aa4650eca3a12891a1d44b105205 The OpenSSF Package Analysis project identified 'sap-all' @ 0.0.0 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-7536 Malicious code in sap-align (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e87ea42b54a5117ae004dd6efd6f57e7dbfe3019b3398157b6ec336de0b84faa The OpenSSF Package Analysis project identified 'sap-align' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-advanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b44915bb9e2db1c39c412b6eafce4e28d360737be9e0a62b77d95c39f99f4c9e The OpenSSF Package Analysis project identified 'sap-advanced' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7515 Malicious code in sap-adress (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37c5e4d5d2c6b439b1cf6346ce37ed432f779ff86d16f2776be39c333f0df902 The OpenSSF Package Analysis project identified 'sap-adress' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7511 Malicious code in sap-address2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9cee0b5eaf1e673a0834af5cc84b8d35484a58574280cb59034efc43ce6c738 The OpenSSF Package Analysis project identified 'sap-address2' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7501 Malicious code in sap-added (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 690c89393c1cd2e1cb373bbeb5814983ffd3c010ffd6a154daf6c46828f46423 The OpenSSF Package Analysis project identified 'sap-added' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7494 Malicious code in sap-activity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3e0a5149544b867f2487852926e46eba534638de827b17055beda04b632dbe63 The OpenSSF Package Analysis project identified 'sap-activity' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7439 Malicious code in sap-access (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1aa14a85de6a25c0c6ad3c4e767a216f5abbd057f79e6b296168df122fe6d7eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fake-package-agpl-license (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53470e96107ebc806b1a440821244a335389aca112b5752ce995ae87150b0b4d The OpenSSF Package Analysis project identified 'fake-package-agpl-license' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7091 Malicious code in parser-7.0.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 99ace32a9b913ac4a00ad574ac934c4eb6274d7c0cf3b948ced6b8191f511b68 The OpenSSF Package Analysis project identified 'parser-7.0.0' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-36257 Lack of permission check when updating the profile picture of a remote user (shared channels enabled)

Mattermost versions 9.5.x = 9.5.5 and 9.8.0, when using shared channels with multiple remote servers connected, fail to check that the remote server A requesting the server B to update the profile picture of a user is the remote that actually has the user as a local one . This allows a malicious...

Malicious code in iobeya-time-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b5b2fd0fb985e16671bbfe20f9b7b2ef8e7a62cc0050b51cea290d85574f75c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1661 Malicious code in govgen-governance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3df1a5ba7e5302cde15d6c6ab8220b80b3dd7d291cbdab4f06cac278dacf77de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in trip-component-platform-online-region-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 007878676d8487bbeba763b564d225daf11ed353d8624a1aa8e52264efe40497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1650 Malicious code in trip-component-platform-online-region-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 007878676d8487bbeba763b564d225daf11ed353d8624a1aa8e52264efe40497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1651 Malicious code in webquickauth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e838cec17c1006b567e2a70f9554fd2a040c9fb0cfdf8d753e81548c1ea02c49 The OpenSSF Package Analysis project identified 'webquickauth' @ 2.3.5 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1643 Malicious code in quickwebbasicauth (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e8ebea7be43f522c7fd45c4793bcac3b33c5ffafa2dc9ea3e0f28657bc650819 The OpenSSF Package Analysis project identified 'quickwebbasicauth' @ 2.3.2 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1631 Malicious code in draconianspeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1212e40bb57fce7672f50431153645b13624cc1e2061b44c0b91fec275e7853 The OpenSSF Package Analysis project identified 'draconianspeed' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1624 Malicious code in importlib-metadate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b6db8994d6a78a5d0d95df2d0add2257ee6188f8c5419cbd7e2813426739d15d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: baidu-readver Reasons based on the campaign: - The package...

MAL-2024-1588 Malicious code in leocare-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 311899bcdd83d3cd308268641290fc8fd0f503d308fc1bbf7488b5f0fab734cb The OpenSSF Package Analysis project identified 'leocare-new' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...