Malicious code in details.app (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 736fc86403c03abaeee1f2b781d8a9f2e7972626546c7109631a8a0b7836a273 The OpenSSF Package Analysis project identified 'details.app' @ 1.2.4 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8670 Malicious code in react-hook-form-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0cf2d07005ec432f85b35387c34d03f3229f9aaeeff947232ac2f58f6015853 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bingoblitz-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca05a909d0e70b609e4b0b342b303f09e7585d6ff3c890081fb66e42f504db72 The OpenSSF Package Analysis project identified 'bingoblitz-frontend' @ 1.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8649 Malicious code in npm_package_dependencies__babel_runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...

MAL-2023-8607 Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8556 Malicious code in primarycare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f127bd23e5c409b4d729767fb6df0fade7da73e67b9bf12303c53330c7970280 The OpenSSF Package Analysis project identified 'primarycare' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8555 Malicious code in otnet-ory-network-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19a9ebfed32ec491b007a6c7e65f8ebae68d0acc3175b56442fa67e25fc916fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8535 Malicious code in frontend-components-react-transpiled (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 463e9359f450d451e47eef2a46a82e6d6fe266ffa312c37239b9e2fda0a440fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8514 Malicious code in frontend-style-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2950942ff85300d3cee0a0eed9f373eaaa043ef93e942089421c5a5586e209e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8515 Malicious code in discord-web-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f33d84f92d16d56339b7efbd2ce2488e85ae2c177d33022e28026c4d74793e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8510 Malicious code in objectish (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 93c6856eaed07800e522a1ada1efa263f95a262db6b3050b3928f8c1fbf8b357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8501 Malicious code in jsii-calc-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca8b3646065a7003a827368b4c1ece0f6ab69346c13662e971a5cc0c223f6f13 The OpenSSF Package Analysis project identified 'jsii-calc-base' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8500 Malicious code in @atea/warranty-form (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b073b818c3493a216e9d334b7f02042f6dbf9b7cea8bbf563b07b5af22952bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-proctor-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7c6de6a72e79dd5f6e54f1f9659918eeecd369c8ef58849ca2e6dbd611c5ad9d The OpenSSF Package Analysis project identified 'frontend-proctor-utils' @ 4.2.8 npm as malicious. It is considered malicious because: - The...

MAL-2023-8486 Malicious code in @zscaler/ec-domain (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 31bceaac08bb6d621ea722590b8ba815799a6af81cc537fa0796ea7983b0f1d2 The OpenSSF Package Analysis project identified '@zscaler/ec-domain' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

GHSA-R2XV-VPR2-42M9 slsa-verifier vulnerable to mproper validation of npm's publish attestations

Summary slsa-verifier attestationstampered.json 5. SLSAVERIFIEREXPERIMENTAL=1 slsa-verifier verify-npm-package supreme-goggles.tgz --attestations-path attestationstampered.json --builder-id "https://github.com/actions/runner/github-hosted" --package-name "@trishankatdatadog/supreme-goggles"...

slsa-verifier vulnerable to mproper validation of npm's publish attestations

Summary slsa-verifier attestationstampered.json 5. SLSAVERIFIEREXPERIMENTAL=1 slsa-verifier verify-npm-package supreme-goggles.tgz --attestations-path attestationstampered.json --builder-id "https://github.com/actions/runner/github-hosted" --package-name "@trishankatdatadog/supreme-goggles"...

MAL-2023-8413 Malicious code in xterm-addon-unicode-graphemes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1e517091262ed409fb53011792754e279673a300f5e9abf2377eec73ed814f9c The OpenSSF Package Analysis project identified 'xterm-addon-unicode-graphemes' @ 6.0.6 npm as malicious. It is considered malicious because: -...

Malicious code in fadam-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 02e81c60df4cba570ba561c45c4e1f48fe798f16078ef1a7c2c601cdb3edf1f7 The OpenSSF Package Analysis project identified 'fadam-frontend' @ 101.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8398 Malicious code in @tpci/i18next-ext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14a4fd8041934f617af9e84fb00ca939b961316d3d7b9519c286dd93035801c8 The OpenSSF Package Analysis project identified '@tpci/i18next-ext' @ 1.6.0 npm as malicious. It is considered malicious because: - The package...