MAL-2024-8876 Malicious code in testing_coll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8518731ff24bfebf9747d6cf7d3a365c7061fe94c0bcc413a194915890f31f75 The OpenSSF Package Analysis project identified 'testingcoll' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8875 Malicious code in rust-functions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 879e91954c530c7fda9e73575ef2f4a945be9a29a5761866d4a4470b32469ce1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8850 Malicious code in azure-iothub-service-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39be68a1794d85382ecb02d31e4d56c310788c3eb8f0f552d464410ec90138a5 The OpenSSF Package Analysis project identified 'azure-iothub-service-client' @ 0.0.2 npm as malicious. It is considered malicious because: - Th...

MAL-2024-8819 Malicious code in 0g-storage-contracts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 189712c4a0b96b9447f3a3e68e5883de6303d027035935681f2341e68eeccc3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8734 Malicious code in @maas-themes/eslint-config-react-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 76dd3e73ed32149194358782c120547fddea51353f2ed5f56384a8ff2f0e828c The OpenSSF Package Analysis project identified '@maas-themes/eslint-config-react-typescript' @ 3.1.4 npm as malicious. It is considered malicio...

MAL-2024-8019 Malicious code in cargo-hub-ui-api-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8026 Malicious code in artifact-lab-3-package-9fde789f (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f494a5211d4ea10a131bb54919b6d5e1bf765cea0c3cc018c054e7e304f5856f Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8044 Malicious code in artifact-lab-3-package-2b6a4744 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c03451c46b9f1a6e1a2ad4df4b3919782e86a4879fa78b7967ae7ec3e694645 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-10473 Malicious code in artifact-lab-3-package-02f73e0e (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ce38f402ec2ebebcc95e82007ff5807caab91173d1823fe9aa89db982083701e Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0239eb42a339ea04c20285cf4f4fd719e841f19d6e59a2cbb78f6e982fcea446 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8023 Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0239eb42a339ea04c20285cf4f4fd719e841f19d6e59a2cbb78f6e982fcea446 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8051 Malicious code in artifact-lab-3-package-3eef6c2c (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2325acb67ca59e847fd003a5449350d2b0b12620ed80cb82cc6189f091bdacc7 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8011 Malicious code in postman-open-technologies-knowledge-base-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1159812781f3847a9da7e6b4455cd3f3ee8bd00da0eddbe589dd52d1d56e8 The OpenSSF Package Analysis project identified 'postman-open-technologies-knowledge-base-api' @ 1.2.3 npm as malicious. It is considered...

MAL-2024-7899 Malicious code in @taxify/smartpickups (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d20e7ecf4639b1082be1a46fec756d84cc7d8fc35310af0e6af87e19879fcf7 The OpenSSF Package Analysis project identified '@taxify/smartpickups' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7895 Malicious code in lit-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58fa9943fe7f3a2ad80c2d7ec817ab05718838e0aef345b7d44416f0f525cdc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7896 Malicious code in nvmfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147e71ec4a806f079f678e7df61fa161680442319b62f425a34e7e8bd87b1e85 The OpenSSF Package Analysis project identified 'nvmfix' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7870 Malicious code in persona-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32b489c0a0bbd44ab1697c3d0492595441e65b30a71a26af76a7dce54fb3d706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7832 Malicious code in zapier-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a72694a59e2b2fa9040cc6e3b823a0e1dabe2ebd53ea16ebd7afbfb8306e01 The OpenSSF Package Analysis project identified 'zapier-elements' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7811 Malicious code in ent-file-upload-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e476e9a95e121c935215443a2069d17764649684cdf226b5d429ea50a9c8c422 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7820 Malicious code in sendapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 293c4e6568da723c801c3e4e60c18d4384908f054f67dfce8cc6769a5dac1f74 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...