678 matches found
MAL-2024-10272 Malicious code in cms-hpti-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e35f9a2795b7a81d170feae4580fb5fab3f60a4f289259701395afe3031d0996 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9452 Malicious code in pwn2day-shell (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0511d29fc5da2e5b913f1015e3a397abcd973ec98bffbff3b41a857ba68dab31 The OpenSSF Package Analysis project identified 'pwn2day-shell' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9442 Malicious code in @ng-cat/common (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0c0268f0af6152271247edc368914f17157c4261598da984de9ee52333993057 The OpenSSF Package Analysis project identified '@ng-cat/common' @ 9.99.9 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9420 Malicious code in @ciam-expressjs-vanilla-samples/shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc28deadcf9235665f79c65d92ca7684f27361c14efa6bcd44ad82b40947b9df The OpenSSF Package Analysis project identified '@ciam-expressjs-vanilla-samples/shared' @ 1.0.1 npm as malicious. It is considered malicious...
MAL-2024-9416 Malicious code in webpack4types (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware af76ada8574132366108f7556f6e93423bf630af2d9af6406efefc94dc3557ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9412 Malicious code in gerhtregefddfsr (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d49d2d7b46e404479e7049fd4c8e6990656fc1c00d07a94799a9d42b8213b138 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9106 Malicious code in @fdp-tools/helm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bef4a02ea616732eda209303ce418b0fbf07d43995a8ac48bada7b7967f78819 The OpenSSF Package Analysis project identified '@fdp-tools/helm' @ 0.1.11 npm as malicious. It is considered malicious because: - The package...
MAL-2024-9103 Malicious code in @fdp-tools/artifactory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d1bc272c51a6ad1997aaaa84623c7746d308a5e53386e01c6845e1b849c7ffa The OpenSSF Package Analysis project identified '@fdp-tools/artifactory' @ 0.0.10 npm as malicious. It is considered malicious because: - The...
MAL-2024-9097 Malicious code in lending-vault (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 133b0e4cf25dec04c7c3fb38e07d7d25d2b2cde44a6c4539d991144baa073ec7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9096 Malicious code in app-monorepo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d98b7aa0eb79bf02f2a4aacf2f8a02611ac609640346bb46294561925dbf0c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-9094 Malicious code in bolteu (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4bd2a7cf68d796d1274d10ce0e343341543e85f964224249a958802918b2482b The OpenSSF Package Analysis project identified 'bolteu' @ 8.2.0 npm as malicious. It is considered malicious because: - The package communicate...
MAL-2024-9089 Malicious code in reference-implementation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 051f4d558f24b6f5d2f54e122fac061a3312288839b9679ffcdadf0210dd32fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8997 Malicious code in neuron-viewer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39e11d5c0e9f49ca7c1e136d6f73f692162e1873d0def4a3135bd3dacbdd9ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8994 Malicious code in assistants-nextjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49dcd943b6b43273aa613aed19e623aa2ae67153ce323248811b64b441f38364 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8985 Malicious code in setup-specmatic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 37056a566edf4edb22af5350f7710d850797b914acbc38bfce3554f44db61d86 The OpenSSF Package Analysis project identified 'setup-specmatic' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-8977 Malicious code in collaborator-trigger05 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19b4660476331fc41f23ce20381efcebc7f8ba7c11954f491848bff463c7f0b0 The OpenSSF Package Analysis project identified 'collaborator-trigger05' @ 1.0.9 npm as malicious. It is considered malicious because: - The...
MAL-2024-8986 Malicious code in case-result-reporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53752de38b0f242f1a98e32994dffdc4793390a73bf2685bb38db58aff3156fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-8961 Malicious code in k0m3g4-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bd260efc78494efc57d67f6576d7ae30b8e58e866ee7a3c228692548174c1e19 The OpenSSF Package Analysis project identified 'k0m3g4-test' @ 2.999.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-8932 Malicious code in @the-c-company/common-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e18cae6ce0c3de2fe7988c316471f5383433deaa0e8b9bf0376b69b634188218 The OpenSSF Package Analysis project identified '@the-c-company/common-utils' @ 1.0.0 npm as malicious. It is considered malicious because: - Th...
MAL-2024-8900 Malicious code in bsc-stdlib-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis df99335a79394c76ec65c4c11bd937510961ba93b67e631d560753ab61a735b6 The OpenSSF Package Analysis project identified 'bsc-stdlib-polyfill' @ 0.0.1 npm as malicious. It is considered malicious because: - The packag...