2425 matches found
MAL-2024-12120 Malicious code in browseui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b865711cc57e93ff56175fee9d7711ab24c1a824c5f9f4f10e569411353ed1c9 The OpenSSF Package Analysis project identified 'browseui' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-12119 Malicious code in stablecoin-aptos (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76e77737db0ec2672a2287bfd58f691ef6d2adea8121df9b5d8e7687048c27b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12116 Malicious code in old-celo-identity (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb1842e08f1ce198d27488ce0f57a12762160650f8c130e49d19053af3f86147 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12114 Malicious code in react-spring-latest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4479151acbc242dd9b62ac68197121a3b973d6eb0b58d6a0ac6900f63b9fe1f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12113 Malicious code in testforyt7hb (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ffea609123713e81da0d17141ca37dca97eaa7848afcbf299d969e5108ce7e2 The OpenSSF Package Analysis project identified 'testforyt7hb' @ 1.2.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-12112 Malicious code in tree-sitter-dockerfile (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 345b2afbf518dc7083621e0f9fb5e7e8b109a319cc7aec619f17c7aa9b18deca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12102 Malicious code in ing-feat-business-lending-financieringscheck (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d7d4045083acf1cce6a6881c2eca10aa356c23635cae053af2e794ae35bd656 The OpenSSF Package Analysis project identified 'ing-feat-business-lending-financieringscheck' @ 1.1.0 npm as malicious. It is considered...
MAL-2024-12099 Malicious code in opsgeniewebhook (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07d9cb12e4cb019225476233e2c9739733fa4a73420e916e0db42a01a6abcf33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12098 Malicious code in widgets-mainappointments (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a05c4f3cc4d5297de929275823c2b67fd6bb6f8988f85acc300b9e4b342219b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12096 Malicious code in lib-wallet-store (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61a0b7fe2eb9c6236a827159916053db6e8ceb5fd8aec76e15eb7c2711d95d73 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in conversations-embed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e54647ae689c5f7d3193ceb233f106eac2255d584c793de83b7de77dd086b2dc The OpenSSF Package Analysis project identified 'conversations-embed' @ 1.21.0 npm as malicious. It is considered malicious because: - The packa...
Malicious code in ui-forms-embed-components-reporting (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2cc02fa4d714e4e0de4210d4132cb0c07b319906e7f88f1f659e43e9ba8b9bb7 The OpenSSF Package Analysis project identified 'ui-forms-embed-components-reporting' @ 1.21.0 npm as malicious. It is considered malicious...
Malicious code in parliament-ui-components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83403e5a067a527fcc2b02f581d2e85cf4f87645402589b407e06ad3f52c100c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in app-settings-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eb5bad98414af86d07823241157507b0c2c71fb619cb487fb0a126587fa9ae8e The OpenSSF Package Analysis project identified 'app-settings-template' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-12085 Malicious code in mono-faucet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a9b64ffe282d49a1f13db908a30b2713843c5dc3ac78ec52d50c8bcf450e401 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12084 Malicious code in @shahwarhello/l2geth (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d5aced97b470cf82beae6ab385323996a424bcf3bb43f800076b4e3158e6d701 The OpenSSF Package Analysis project identified '@shahwarhello/l2geth' @ 0.5.11 npm as malicious. It is considered malicious because: - The...
MAL-2024-12081 Malicious code in testbyakash2310please (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ab898b094ec69febe5691ee0bb06b4040dc1dd9c9bb9632fd7b3d24d2b2870b The OpenSSF Package Analysis project identified 'testbyakash2310please' @ 69.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in phonepe-payment-capacitor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d01542a7b9d2f9074bacbba74137fca1ea6f0a5e3a4539037d83dc529ff4d44 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12077 Malicious code in layerzero-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e38548e48278e6b84fe1732117aef2c443aee26ea8e5694692002fe7342e1e30 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-12076 Malicious code in api-demo-sample-lib1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware feb4cdcfd09bde3632e5027efd5e0378c93e89ab16f9e0f0e931586d1679412d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...