MAL-2023-1088 Malicious code in @metronetinc/react-component-library-next-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d29aaa8c56838993a54df9b7ee45362f439f4b704ca467383c14f4643e2151a9 The OpenSSF Package Analysis project identified '@metronetinc/react-component-library-next-plugin' @ 9.999.8 npm as malicious. It is considered...

MAL-2023-1087 Malicious code in @metronetinc/react-component-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60618ba400c79770b18a43c36d0b3b9723c5f4df204ac012d6aea96d17de5bdd The OpenSSF Package Analysis project identified '@metronetinc/react-component-library' @ 9.999.8 npm as malicious. It is considered malicious...

Malicious code in uber-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a520e43e8c3f5918ff525c55f9b99a1715b3b4d89e3596cc698e7954e2bc7e63 The OpenSSF Package Analysis project identified 'uber-eslint' @ 99.99.992 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1097 Malicious code in @optalp/test-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2be61ba56fbca0d8199a70e1257f274b56d233dfc2edd33b2fc29ab7b2a8446a The OpenSSF Package Analysis project identified '@optalp/test-package' @ 1.0.6 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1080 Malicious code in @hihihehehaha/vgujsonfrankfurtola (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97abddac90750ebdebe8b52bdb02e50b71a485c334f2d81943eb09ed0ad24749 The OpenSSF Package Analysis project identified '@hihihehehaha/vgujsonfrankfurtola' @ 2.5.0 npm as malicious. It is considered malicious because...

Malicious code in @hubportal/sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a5339f716a6209e3408d4781031aabf5634245533ce5d1ba42df2f82e912e622 The OpenSSF Package Analysis project identified '@hubportal/sdk' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

Malicious code in openai-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ae52243725fa671be1294e1a3747581764b2e74d9c499e0ac249b03676d0dbf The OpenSSF Package Analysis project identified 'openai-beta' @ 99.99.999 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1259 Malicious code in openai-beta (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4ae52243725fa671be1294e1a3747581764b2e74d9c499e0ac249b03676d0dbf The OpenSSF Package Analysis project identified 'openai-beta' @ 99.99.999 npm as malicious. It is considered malicious because: - The package...

Malicious code in naveen4gem (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f434b9b8cbf657627010562fe56245ba16cc930cdd82258625fd29bab68205c The OpenSSF Package Analysis project identified 'naveen4gem' @ 1.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in naveengem (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12a3ed7380fdb815c2f8c5a086b33d516acc0bbdaab4d4df8203efed20ae348b The OpenSSF Package Analysis project identified 'naveengem' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in hideorg-lvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cadb232e4b479810d217f2adbfed5e8dba555837082c21bb6fc0501c0686c462 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...

MAL-2023-1199 Malicious code in hideorg-lvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cadb232e4b479810d217f2adbfed5e8dba555837082c21bb6fc0501c0686c462 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...

MAL-2023-1094 Malicious code in @obg/gtm.types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c49019b18d394a7faef47a1333687dacb2f9e2489953e8eddf211df2733d496 The OpenSSF Package Analysis project identified '@obg/gtm.types' @ 99999.22222222.0 npm as malicious. It is considered malicious because: - The...

Malicious code in 1password-postman-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93be26c7bf7ce939a783f5c98c26ecd585430bdb1c993cf3f78dd213a316a058 The OpenSSF Package Analysis project identified '1password-postman-integration' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2023-1077 Malicious code in 1password-postman-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93be26c7bf7ce939a783f5c98c26ecd585430bdb1c993cf3f78dd213a316a058 The OpenSSF Package Analysis project identified '1password-postman-integration' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2023-1095 Malicious code in @obg/ngx.global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 88f55cbace2fa2eb2e05fb52cd0e69c6a623b5b977a0d6638853b20fe1dac89f The OpenSSF Package Analysis project identified '@obg/ngx.global' @ 99999.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-55 Malicious code in @sbb2b/ngx.sportsbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ccf1238d371f61b48d44f2b32d79ce73e0d25a42508d9e535ce93580010016d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1286 Malicious code in salesforce-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf2a69a3613a2fc56dfb5d3eb3f2b0289bf2f9c8b0db94caf8d754699c12d175 The OpenSSF Package Analysis project identified 'salesforce-ux' @ 1.6.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @shennong/web-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2fd786e967b26aa2bbe8f8367eda2745ce70026f11bcc9b832e3bcb93433b58 The OpenSSF Package Analysis project identified '@shennong/web-logger' @ 25.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1104 Malicious code in @rustore-web/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b585e96458bb3cf6eb082211fc6fa2d3da3a32d3dd1a9dd04ec13b7e4f97d8a5 The OpenSSF Package Analysis project identified '@rustore-web/config' @ 2.1.4 npm as malicious. It is considered malicious because: - The packag...