MAL-2024-11814 Malicious code in @tradm/my_package_legit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 29cce75017efa5cb89df0d22884f39b9d70b835108800ea9b64b10f295f11eb7 The OpenSSF Package Analysis project identified '@tradm/mypackagelegit' @ 1.9.24 npm as malicious. It is considered malicious because: - The...

MAL-2024-11219 Malicious code in asuuuuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d2219a3e70e5af240f63d41ab082cad543b84acf2abd045011db292bc69654 The OpenSSF Package Analysis project identified 'asuuuuu' @ 3.1.3 npm as malicious. It is considered malicious because: - The package communicat...

Malicious code in privy-frames-drop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f03babad9cbb72b88a3dac7beadb5275fa4c3ab5364d435f372bf5dffbd8ee The OpenSSF Package Analysis project identified 'privy-frames-drop' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11249 Malicious code in privy-frames-drop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7f03babad9cbb72b88a3dac7beadb5275fa4c3ab5364d435f372bf5dffbd8ee The OpenSSF Package Analysis project identified 'privy-frames-drop' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in private-lib-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef8c8e73b8b4d3414d06cadfd08f308a41276fe31204d26bc85d1eb566c4923c The OpenSSF Package Analysis project identified 'private-lib-bug-bounty' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-11188 Malicious code in private-lib-bug-bounty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef8c8e73b8b4d3414d06cadfd08f308a41276fe31204d26bc85d1eb566c4923c The OpenSSF Package Analysis project identified 'private-lib-bug-bounty' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in cdp-agentkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e07ec87bf0a5899c4f97a1c0fcd453df1c220cea6a7a6944d6316f40f9def44c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11189 Malicious code in pocfinalone.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57ba0a7f365bfa72152e4c3d1f5031f733dbc369cf392a3afdf557f70546bde3 The OpenSSF Package Analysis project identified 'pocfinalone.js' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11179 Malicious code in tailchat-service-swagger-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acf09d7e9f52a0406ff87b349906e6278f766537755abbd90395b2179ccd36fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11178 Malicious code in tailchat-service-openapi-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 22511b2b576ee7a41e7c7f6abf4e9a9fdedded65c99367d47f3f5cda4ce875c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11177 Malicious code in spinal-service-ticket (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aae35c4e4ff6906cb7d4d11279ee76155e4fe161e95d96ecea1f4e61e9a67412 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11172 Malicious code in spinal-core-connectorjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f55ec90344a6042cf94a3e9a576e833a0277da7732a8322612604d186cab49b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11169 Malicious code in language-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 868a15884f8fa2dcf7b6c3e4c90ba8f449da26537cb4a784fc76e22057c739f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fluid-tooltip (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5d371b6c8c7950311649323e234550b5c9c644c9a9e2aada8180962d6dab886 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11159 Malicious code in fetlla2-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 626ab8d342caf421b4ede0958a23d5fecc4a7272ca83f0a7b5a4bbf2349a845c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11158 Malicious code in o-tabssssssle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48f8ca040e7ad3dd3b10535c7ffe6d9ff2f150d544aff2bcb65867468408dbb5 The OpenSSF Package Analysis project identified 'o-tabssssssle' @ 10.11.12 npm as malicious. It is considered malicious because: - The package...

MAL-2024-11024 Malicious code in uid2-publisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07aebc5dbf3b61ba90b2d709f5b43ce5a08f773e0eff9ec55029e2c0ea5c027e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10913 Malicious code in symphony-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d8ac47d747638835685ead66cf3fe6fc737f93e540093a4f94b0148b45db3c3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10901 Malicious code in aries-bifold-root (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eca3e60fffb3a648dbd8cdd504332376d85921d174fa35cf3d8dae17f1302543 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10910 Malicious code in node-commerce-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfa533cdd1af622e3c90101a8a4cdd292f00540f515f5e264c683a2984199538 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...