Malicious code in naveen4gem (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f434b9b8cbf657627010562fe56245ba16cc930cdd82258625fd29bab68205c The OpenSSF Package Analysis project identified 'naveen4gem' @ 1.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in naveengem (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12a3ed7380fdb815c2f8c5a086b33d516acc0bbdaab4d4df8203efed20ae348b The OpenSSF Package Analysis project identified 'naveengem' @ 0.1.0 rubygems as malicious. It is considered malicious because: - The package...

Malicious code in hideorg-lvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cadb232e4b479810d217f2adbfed5e8dba555837082c21bb6fc0501c0686c462 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...

MAL-2023-1199 Malicious code in hideorg-lvl (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cadb232e4b479810d217f2adbfed5e8dba555837082c21bb6fc0501c0686c462 Malicious packages campaign since 2021 targeting developers, steals source code and secrets Source: ossf-package-analysis...

MAL-2023-1094 Malicious code in @obg/gtm.types (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c49019b18d394a7faef47a1333687dacb2f9e2489953e8eddf211df2733d496 The OpenSSF Package Analysis project identified '@obg/gtm.types' @ 99999.22222222.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1077 Malicious code in 1password-postman-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93be26c7bf7ce939a783f5c98c26ecd585430bdb1c993cf3f78dd213a316a058 The OpenSSF Package Analysis project identified '1password-postman-integration' @ 1.0.0 npm as malicious. It is considered malicious because: -...

Malicious code in 1password-postman-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 93be26c7bf7ce939a783f5c98c26ecd585430bdb1c993cf3f78dd213a316a058 The OpenSSF Package Analysis project identified '1password-postman-integration' @ 1.0.0 npm as malicious. It is considered malicious because: -...

MAL-2023-1095 Malicious code in @obg/ngx.global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 88f55cbace2fa2eb2e05fb52cd0e69c6a623b5b977a0d6638853b20fe1dac89f The OpenSSF Package Analysis project identified '@obg/ngx.global' @ 99999.0.0 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-55 Malicious code in @sbb2b/ngx.sportsbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ccf1238d371f61b48d44f2b32d79ce73e0d25a42508d9e535ce93580010016d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1286 Malicious code in salesforce-ux (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf2a69a3613a2fc56dfb5d3eb3f2b0289bf2f9c8b0db94caf8d754699c12d175 The OpenSSF Package Analysis project identified 'salesforce-ux' @ 1.6.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in @shennong/web-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a2fd786e967b26aa2bbe8f8367eda2745ce70026f11bcc9b832e3bcb93433b58 The OpenSSF Package Analysis project identified '@shennong/web-logger' @ 25.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2023-1104 Malicious code in @rustore-web/config (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b585e96458bb3cf6eb082211fc6fa2d3da3a32d3dd1a9dd04ec13b7e4f97d8a5 The OpenSSF Package Analysis project identified '@rustore-web/config' @ 2.1.4 npm as malicious. It is considered malicious because: - The packag...

Malicious code in bernie-plugin-ads-loader-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 83e103eb1b7d3a9fd0472fb99351cf0a76fe9da9bbfc65b0eb31f78cd762ce53 The OpenSSF Package Analysis project identified 'bernie-plugin-ads-loader-script' @ 1.0.0 npm as malicious. It is considered malicious because: ...

Malicious code in react-green-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3109c997fe1ab2888814f3679bf903a97bce7112d5921a921ae0aea7d787fe3d The OpenSSF Package Analysis project identified 'react-green-ui' @ 10.0.49 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1321 Malicious code in thentiacloud-angularjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 080925c1a04cb601b6c5a204f7e8db92592ee52721272a7effa1eb5caf5207c8 The OpenSSF Package Analysis project identified 'thentiacloud-angularjs' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

Malicious code in thentiacloud-angularjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 080925c1a04cb601b6c5a204f7e8db92592ee52721272a7effa1eb5caf5207c8 The OpenSSF Package Analysis project identified 'thentiacloud-angularjs' @ 1.2.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1220 Malicious code in js-starter-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac64c737affe45fd76d9899026d4a4d2f775e04e0391693ffcb2dafa665b07c5 The OpenSSF Package Analysis project identified 'js-starter-code' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in js-starter-code (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ac64c737affe45fd76d9899026d4a4d2f775e04e0391693ffcb2dafa665b07c5 The OpenSSF Package Analysis project identified 'js-starter-code' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1288 Malicious code in schweppes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6413b14065c0dae4dd031864f7a515ead037541f7f74a2907a2d554ebe4e7fe The OpenSSF Package Analysis project identified 'schweppes' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in jquery-overscroll (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 279b9014e86c11c82ac819b5e3bbbbbfc2868e3131b65bd941e60d08985cfbb0 The OpenSSF Package Analysis project identified 'jquery-overscroll' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...