Malicious code in xterm-addon-clipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cf6d3796e2698ca788f0833376dcbd11460b764506f5ffb63bdd8e71262113e The OpenSSF Package Analysis project identified 'xterm-addon-clipboard' @ 6.0.7 npm as malicious. It is considered malicious because: - The...

MAL-2023-8444 Malicious code in xterm-addon-clipboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cf6d3796e2698ca788f0833376dcbd11460b764506f5ffb63bdd8e71262113e The OpenSSF Package Analysis project identified 'xterm-addon-clipboard' @ 6.0.7 npm as malicious. It is considered malicious because: - The...

MAL-2023-8423 Malicious code in @olxui/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a653affd18c77f72727a33c59b7baebb39d3a38ecec4a894d1eff832cbc0501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8413 Malicious code in xterm-addon-unicode-graphemes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e517091262ed409fb53011792754e279673a300f5e9abf2377eec73ed814f9c The OpenSSF Package Analysis project identified 'xterm-addon-unicode-graphemes' @ 6.0.6 npm as malicious. It is considered malicious because: -...

MAL-2023-8406 Malicious code in fadam-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02e81c60df4cba570ba561c45c4e1f48fe798f16078ef1a7c2c601cdb3edf1f7 The OpenSSF Package Analysis project identified 'fadam-frontend' @ 101.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8331 Malicious code in microsoft-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b84eb200adc4898d4297b41d18f6626e0f523adcc46e93fee22927b058427eff The OpenSSF Package Analysis project identified 'microsoft-ux' @ 1.2.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in react-fixtures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 313318cff861c45bde316c24fa07d680f6c59e74a77ae6e65c31fe66f54e2f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8259 Malicious code in react-fixtures (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 313318cff861c45bde316c24fa07d680f6c59e74a77ae6e65c31fe66f54e2f9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8188 Malicious code in optimize-procurement-and-inventory-with-ai (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d4a974419b1ab87d44f6d1c5cfd7fac97f037b476328f114d344113cf6bbd6f The OpenSSF Package Analysis project identified 'optimize-procurement-and-inventory-with-ai' @ 6.1.8 npm as malicious. It is considered maliciou...

MAL-2023-8216 Malicious code in gatecrash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 763f1f221e08f4de4ac758d78eb73e70fc818031913727c20ef6053f65c402d4 The OpenSSF Package Analysis project identified 'gatecrash' @ 10.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sw-kendo-atomic-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eab73647b527538bf40cfbdf97e174668dd9918036b96cf3312fe8982cbd9060 The OpenSSF Package Analysis project identified 'sw-kendo-atomic-theme' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8163 Malicious code in symphony-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1360bb9cfdd8afaf47d9444561048cc1f780fc6dd830a6d709320dc260bf7476 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rambox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63e80eb984d70eca3cfadd2c9872df353dba45f0c14111f84c9c0ab34f8b8930 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8125 Malicious code in pmd-github-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 25570da8772dbadd784a50cef765f49e039bdd693711fa519447931729c5ec72 The OpenSSF Package Analysis project identified 'pmd-github-action' @ 7.2.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in jerry1319 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39c3e74d9394364350aac9f2396311212f3cf3e8704fb23daf2bca46a9e24227 The OpenSSF Package Analysis project identified 'jerry1319' @ 1.0.10 npm as malicious. It is considered malicious because: - The package execute...

MAL-2023-8122 Malicious code in jerry1319 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39c3e74d9394364350aac9f2396311212f3cf3e8704fb23daf2bca46a9e24227 The OpenSSF Package Analysis project identified 'jerry1319' @ 1.0.10 npm as malicious. It is considered malicious because: - The package execute...

MAL-2023-8101 Malicious code in ppreact7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e2ad9ded90a270baf25a460421789f5a815f2956ef05fcf3e1b96cf1b2f35eb2 The OpenSSF Package Analysis project identified 'ppreact7' @ 7.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-7990 Malicious code in www-ankr-com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85d24b010e3938b6a72218999a497d5a519ab8c4422e0f1d8fef66d103f92ef4 The OpenSSF Package Analysis project identified 'www-ankr-com' @ 2.0.10 npm as malicious. It is considered malicious because: - The package...

Malicious code in jupiter-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a995253a2ee90fffb109184b329a5e1966f4e8b6cd8a67c131c60324495d8127 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-7961 Malicious code in web3-provider-patchers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3da847a0100e6d34ec1eaaf261644c00fcc8342f19bf86f01da33f61a7fb9d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...