MAL-2024-11795 Malicious code in pacbot-spa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2527f33d46883eac958d98baa0937139f8988ddc5f7803d5764921761ddf4e3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11790 Malicious code in letstryout (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a93677f9ccf05c515928c2e92d24da7333665953bc870d75a78a1d20b4ac3e3 The OpenSSF Package Analysis project identified 'letstryout' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11789 Malicious code in majidalfuttaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1f62a0253b388a37cdf7f07ff7d02dac3e0bbed2516288af419cdcf7218c979b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11812 Malicious code in @flutteruki-gaming/eslint-config-flutteruki-gaming (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1d4e889992a980c69235fc81b993e0417a4bf52dcb6e16a20b0c32e8cf3057fe The OpenSSF Package Analysis project identified '@flutteruki-gaming/eslint-config-flutteruki-gaming' @ 1.8.0 npm as malicious. It is considered...

MAL-2024-11779 Malicious code in blacky-sheppoing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd5fabc8fe73f97f7fe5b3fc0d6bcb5d30d10325cdc85801ff4b38f51112d597 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11760 Malicious code in ico-maker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 73a9101fd1883fa4391f715823a7c1e815b0f041bb5157972a143bddaaab285d The OpenSSF Package Analysis project identified 'ico-maker' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11770 Malicious code in keycloak-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3df989aa26dccceca3917c9b3454427df4f54e9c104fbc080e913d30af3e66b2 The OpenSSF Package Analysis project identified 'keycloak-server' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11765 Malicious code in @wf-ceo/react-test-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 91f840b7f5327bc27f6d9d37a547419df230c1ff7fd68cca9b0753faf6759012 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11755 Malicious code in @neo-ds/neo-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6d3d5e2f6b432e3a4491b74a6c06d176dcf93aa9cf419db326cea281b530044b The OpenSSF Package Analysis project identified '@neo-ds/neo-utils' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11767 Malicious code in com.unity.collections (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 261ab2743232ff1e6c05ececf67a115acadf196fe4994bda33c1da81b933ac67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11251 Malicious code in @neo-ds/components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb7303825f9830a20957d406c7a1b9193816b17c907592e4fa1e8a6fa48c61e3 The OpenSSF Package Analysis project identified '@neo-ds/components' @ 3.3.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11247 Malicious code in fake-emitter-no-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 617a8cfca6b74959261bd71e3b3ca3df87a9c9640991d6ffcf692cf5597f01c3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11242 Malicious code in yelp-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f281d7fb655f7083b4004d10fb257b419c7aeaf1ea0b79636721d4724aec51d9 The OpenSSF Package Analysis project identified 'yelp-lib' @ 17.1.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11234 Malicious code in adminconsole (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88480db379ccb5378aada30388162f00d8033acb86b62e8d2e490533646c4a4d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11224 Malicious code in file-dep-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 167e76bf6af632f8aff7b06b0a8b05d6a25772b2cb139605e13b5b9a84ecf53b The OpenSSF Package Analysis project identified 'file-dep-a' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11223 Malicious code in usdc.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8c87f8dca2d6eefcdbdec42cfba8e7b187195b7531d277735a9e255911fc1e3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11814 Malicious code in @tradm/my_package_legit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29cce75017efa5cb89df0d22884f39b9d70b835108800ea9b64b10f295f11eb7 The OpenSSF Package Analysis project identified '@tradm/mypackagelegit' @ 1.9.24 npm as malicious. It is considered malicious because: - The...

MAL-2024-11219 Malicious code in asuuuuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d2219a3e70e5af240f63d41ab082cad543b84acf2abd045011db292bc69654 The OpenSSF Package Analysis project identified 'asuuuuu' @ 3.1.3 npm as malicious. It is considered malicious because: - The package communicat...

MAL-2024-11249 Malicious code in privy-frames-drop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f03babad9cbb72b88a3dac7beadb5275fa4c3ab5364d435f372bf5dffbd8ee The OpenSSF Package Analysis project identified 'privy-frames-drop' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11189 Malicious code in pocfinalone.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57ba0a7f365bfa72152e4c3d1f5031f733dbc369cf392a3afdf557f70546bde3 The OpenSSF Package Analysis project identified 'pocfinalone.js' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...