Malicious code in ori-gabriel-test2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97118bb098b3b51630483b77d70977a582c54e3768ff5c54a65435870b3840de The OpenSSF Package Analysis project identified 'ori-gabriel-test2' @ 7.7.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in td-emerald-standards (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2f97f10309683aa0addae921845bdf8ce584670d8640544b7eeb2c41501e7af The OpenSSF Package Analysis project identified 'td-emerald-standards' @ 6.6.6 npm as malicious. It is considered malicious because: - The packa...

CVE-2024-23168

Vulnerability in Xiexe XSOverlay before build 647 allows non-local websites to send the malicious commands to the WebSocket API, resulting in the arbitrary code execution...

CVE-2024-23168

A vulnerability exists in Xiexe XSOverlay versions prior to build 647 , a desktop overlay application for OpenVR. The flaw allows non-local websites to send malicious commands to the WebSocket API due to missing origin validation, which can result in arbitrary code execution . To resolve this iss...

Malicious code in @taxify/eslint-config-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cff605dafce45695b36c5a3ca744b5187bab414e45e390d8e4ac966f6088573 The OpenSSF Package Analysis project identified '@taxify/eslint-config-react-native' @ 9.999.0 npm as malicious. It is considered malicious...

MAL-2024-7899 Malicious code in @taxify/smartpickups (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d20e7ecf4639b1082be1a46fec756d84cc7d8fc35310af0e6af87e19879fcf7 The OpenSSF Package Analysis project identified '@taxify/smartpickups' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

Malicious code in nvidia-clara-sim (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c71c25349ac9885da40fc765909e2c5fdcfb90a2ed9424ab5a3f070c74597a35 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in slo-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 43e18d91b3514c4d1f87bbc68730da7b0ce3213e132d2133cb2ee0d06bc07504 The OpenSSF Package Analysis project identified 'slo-schema' @ 10.20.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in x91yz (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e4cfb5ebf38924c80a8ac2ab612e4c663039edbec7a6ace7cd55d290f84ca3ce The OpenSSF Package Analysis project identified 'x91yz' @ 2.4.12 npm as malicious. It is considered malicious because: - The package executes on...

Malicious code in health-and-wellness-collab-macro-deploy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 490467d98a5f3dcce3605ce769912fad8036917a2da1ab4065e039e6a970a34b The OpenSSF Package Analysis project identified 'health-and-wellness-collab-macro-deploy' @ 1.0.8 npm as malicious. It is considered malicious...

MAL-2024-7737 Malicious code in lykooss_poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ba3a00276cdb801eafba21620fd8bb30298090ac3c341a63455934994d7c6bb The OpenSSF Package Analysis project identified 'lykoosspoc' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-28872

The TLS certificate validation code is flawed. An attacker can obtain a TLS certificate from the Stork server and use it to connect to the Stork agent. Once this connection is established with the valid certificate, the attacker can send malicious commands to a monitored service Kea or BIND 9,...

Malicious code in sap-cardtype (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a79fef21427f6ae3691dc579221cc5e646ba19058b83807d48f46c89d09d0010 The OpenSSF Package Analysis project identified 'sap-cardtype' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7689 Malicious code in sap-cats (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 01665862aab373cb3718450061593c791128c0165f161a7105a72e3808845186 The OpenSSF Package Analysis project identified 'sap-cats' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-audiobitrates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a562c3515e1c83b0487a98af34b44a3adaae6743b3d18bc8de7eebd31e0537bb The OpenSSF Package Analysis project identified 'sap-audiobitrates' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-catslist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0b75825737ecbb91b63642e7c02ee416f9579800c5c8e34f29523d0052909c8 The OpenSSF Package Analysis project identified 'sap-catslist' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-catorder (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a4d0a65fe6fa8befaf90ff6e8553923a6f0018202e771c06fbabca90482ce306 The OpenSSF Package Analysis project identified 'sap-catorder' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7644 Malicious code in sap-authitem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6bddbe556bea51802eadeaf835c5a115dc0c681418d7a5a3fce19689b32aa2a The OpenSSF Package Analysis project identified 'sap-authitem' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-base64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9ddcb3e8e9c57661ff9d809f14befe4241d65754544d987500bb286bda041f77 The OpenSSF Package Analysis project identified 'sap-base64' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in sap-aname (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5e298494a36dfcae17dfb9e4f49d1a8d264ad8f57b8c702eb090eb3f61c5dd02 The OpenSSF Package Analysis project identified 'sap-aname' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...