Malicious code in aauto-assign-team-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ef1fe2d72d5632ea92996b145c4713780023fe149d21e2f24e5ba190caf8100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-25042

CVE-2024-25042 affects IBM Cognos Analytics 11.2.0–11.2.4 and 12.0.0–12.0.3, where an XSS flaw arises from improper validation of Cognos Explorations column headings. The root cause is improper input validation in the Cognos Explorations module, allowing a remote attacker to run malicious command...

Malicious code in ifood-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e523e57e2b34793b9a65626a1c74932d6b6b5339b658b78187d5fcb22f2563e The OpenSSF Package Analysis project identified 'ifood-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11879 Malicious code in ifood-github-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8e523e57e2b34793b9a65626a1c74932d6b6b5339b658b78187d5fcb22f2563e The OpenSSF Package Analysis project identified 'ifood-github-io' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in web3-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 965af70ebf07de371170bda6a257b464ee058430c0f1d6112323bacabbe19d5c The OpenSSF Package Analysis project identified 'web3-docs' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in bsc-genesis-contract (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b748ec201796843d6518adc42387f04d09ff54e6e79a88c0c9c8915d8b503352 The OpenSSF Package Analysis project identified 'bsc-genesis-contract' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-11869 Malicious code in questdb-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 292ba477ee3d52c63d6ed6f224aac50507b0f816c20c525c36dc99f37f411eba The OpenSSF Package Analysis project identified 'questdb-console' @ 99.99.99 npm as malicious. It is considered malicious because: - The package...

Malicious code in bounty123ay (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 272a0c5cf3a56fbb91d5d2a6da53f4fd7be8ddc9385faecf02e97d7ec2f263dd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in resultstore-search-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 85736ae7368ae102434c7881aa59599a9d612a91f34c7b4f443f3604c21f60c8 The OpenSSF Package Analysis project identified 'resultstore-search-client' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in flame-monorepo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 573f0562922d2b7705bac8770fd0432d48b2e0325a561ab6b21ff0710974e426 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in auth0-lock-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fc8cb7c85f580c66397adec583bbd6623eafcb98683fcf6299ca73188892009f The OpenSSF Package Analysis project identified 'auth0-lock-webpack' @ 99.99.99 npm as malicious. It is considered malicious because: - The...

Malicious code in pacbot-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2527f33d46883eac958d98baa0937139f8988ddc5f7803d5764921761ddf4e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11793 Malicious code in dextester123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a26d87ee78544b18671f34fdbfc2bb566d83d78f917c88958141e6c335ba9242 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shyftportal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c420e2c055c4dac21abe5aa3deacde16aef6dcd57335d4244adffc4346365a2e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in goworker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc41b31c8374e8dfb0d1a61187a9224907fd3adc6b4988f7285c3ab45891a807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @aoflmkt/is-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e1efcaba98a4db72e85c952c1936c99152081de71c2732e8189d9ad65390116 The OpenSSF Package Analysis project identified '@aoflmkt/is-desktop' @ 100.100.106 npm as malicious. It is considered malicious because: - The...

Malicious code in okxweb3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fce54676410bc1cff0b9c8068f4b763ec72e75752bc5cb2ba565027d48dcc4fe The OpenSSF Package Analysis project identified 'okxweb3' @ 99.999.999 npm as malicious. It is considered malicious because: - The package...

Malicious code in @wf-ceo/react-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91f840b7f5327bc27f6d9d37a547419df230c1ff7fd68cca9b0753faf6759012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tokenize-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4bf2139d8e0c1fd0cc2a5999a43ea8e49dce3b4cfdc1945fab3c8f5160851e1e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in adminconsole (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88480db379ccb5378aada30388162f00d8033acb86b62e8d2e490533646c4a4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...