MAL-2024-12126 Malicious code in @awan_7715/model-viewer-space-opera (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e555e285993ff5179f3dad8424c83097053d02d6b4a91a72319eaabb6f1e6282 The OpenSSF Package Analysis project identified '@awan7715/model-viewer-space-opera' @ 1.1.1 npm as malicious. It is considered malicious becaus...

MAL-2024-12120 Malicious code in browseui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b865711cc57e93ff56175fee9d7711ab24c1a824c5f9f4f10e569411353ed1c9 The OpenSSF Package Analysis project identified 'browseui' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-12119 Malicious code in stablecoin-aptos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76e77737db0ec2672a2287bfd58f691ef6d2adea8121df9b5d8e7687048c27b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12116 Malicious code in old-celo-identity (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1842e08f1ce198d27488ce0f57a12762160650f8c130e49d19053af3f86147 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12114 Malicious code in react-spring-latest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4479151acbc242dd9b62ac68197121a3b973d6eb0b58d6a0ac6900f63b9fe1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12113 Malicious code in testforyt7hb (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ffea609123713e81da0d17141ca37dca97eaa7848afcbf299d969e5108ce7e2 The OpenSSF Package Analysis project identified 'testforyt7hb' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-12112 Malicious code in tree-sitter-dockerfile (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 345b2afbf518dc7083621e0f9fb5e7e8b109a319cc7aec619f17c7aa9b18deca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12099 Malicious code in opsgeniewebhook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07d9cb12e4cb019225476233e2c9739733fa4a73420e916e0db42a01a6abcf33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12098 Malicious code in widgets-mainappointments (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05c4f3cc4d5297de929275823c2b67fd6bb6f8988f85acc300b9e4b342219b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12096 Malicious code in lib-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a0b7fe2eb9c6236a827159916053db6e8ceb5fd8aec76e15eb7c2711d95d73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12085 Malicious code in mono-faucet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b64ffe282d49a1f13db908a30b2713843c5dc3ac78ec52d50c8bcf450e401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12084 Malicious code in @shahwarhello/l2geth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d5aced97b470cf82beae6ab385323996a424bcf3bb43f800076b4e3158e6d701 The OpenSSF Package Analysis project identified '@shahwarhello/l2geth' @ 0.5.11 npm as malicious. It is considered malicious because: - The...

MAL-2024-12081 Malicious code in testbyakash2310please (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ab898b094ec69febe5691ee0bb06b4040dc1dd9c9bb9632fd7b3d24d2b2870b The OpenSSF Package Analysis project identified 'testbyakash2310please' @ 69.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-12077 Malicious code in layerzero-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38548e48278e6b84fe1732117aef2c443aee26ea8e5694692002fe7342e1e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12076 Malicious code in api-demo-sample-lib1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb4cdcfd09bde3632e5027efd5e0378c93e89ab16f9e0f0e931586d1679412d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-12075 Malicious code in grafana-report-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8623412527e3e107cf7a8046c236118472390191d5e456e969b6c628b3d708fa The OpenSSF Package Analysis project identified 'grafana-report-panel' @ 2.0.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-12074 Malicious code in @rrvis/code-mapper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19a43a84b4d9f910d4a656a44cae41f44115366eb59777c6b6be77fd66de9fc8 The OpenSSF Package Analysis project identified '@rrvis/code-mapper' @ 99.99.3 npm as malicious. It is considered malicious because: - The packa...

Malicious code in yb2bacceleratorstorefront-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6b9ec48a872ef195c69f3ecee359b142d1f9bb683a236c67a0c96876efafd0 The OpenSSF Package Analysis project identified 'yb2bacceleratorstorefront-web' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2024-12067 Malicious code in aauto-assign-team-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ef1fe2d72d5632ea92996b145c4713780023fe149d21e2f24e5ba190caf8100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11929 Malicious code in @rrvis/ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis feaaf40ea5d1af97c31051295c594dc2344a3337d6b9aba3e9ae1ed6451001f0 The OpenSSF Package Analysis project identified '@rrvis/ui' @ 99.99.2 npm as malicious. It is considered malicious because: - The package...