MAL-2024-1312 Malicious code in actions-next-bundle-analyzer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a738c63046c2bd1588c1bcc21eafd03d28a480f73643ea8b429ff5fa00da78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord.js-hex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 015a5d02bee306302c82f2de4541e008c6ebcc61804819bf894aac181a1c9eac The OpenSSF Package Analysis project identified 'discord.js-hex' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1274 Malicious code in ui-common-components-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c0d823ab954cd19f85bb933d25f8230386023a6a1fd15430efce0298f6a25aa9 The OpenSSF Package Analysis project identified 'ui-common-components-angular' @ 1.3.1 npm as malicious. It is considered malicious because: - T...

MAL-2024-1273 Malicious code in metrics-balancer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c4d7b54aa00bce85364eddf568913642023e355ba669803fa01e20a143e93a47 The OpenSSF Package Analysis project identified 'metrics-balancer' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1275 Malicious code in @portal-packages/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 543a89535f49dbd2c40707219fba6c80040d752e90ba3347abf1d61e9ea0e477 The OpenSSF Package Analysis project identified '@portal-packages/utils' @ 3.0.99 npm as malicious. It is considered malicious because: - The...

MAL-2024-1272 Malicious code in @portal-packages/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 48accd040235db7bd6be1bcdc1f268ed9f438c3d3029090ee357139bbe870759 The OpenSSF Package Analysis project identified '@portal-packages/core' @ 15.105.105 npm as malicious. It is considered malicious because: - The...

MAL-2024-1267 Malicious code in commitlint-config-ifood (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 82ce80367972231229038d234d1114c39f459b1c4bfe4a03392a3cfa35d4454b The OpenSSF Package Analysis project identified 'commitlint-config-ifood' @ 1.95.102 npm as malicious. It is considered malicious because: - The...

MAL-2024-1254 Malicious code in reqargs (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d1ba9bc54763d8ec8336f0edc8d5997d5fb080801556f288a4935dac06d4878 The OpenSSF Package Analysis project identified 'reqargs' @ 1.4 pypi as malicious. It is considered malicious because: - The package communicate...

MAL-2024-1198 Malicious code in locus-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae618c99394568c62b082d0c55c5da01da065e9ad01343f5737caf05685612b8 The OpenSSF Package Analysis project identified 'locus-website' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in locus-website (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ae618c99394568c62b082d0c55c5da01da065e9ad01343f5737caf05685612b8 The OpenSSF Package Analysis project identified 'locus-website' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1177 Malicious code in poptoken-builder-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e47c000bd16e968d0cf79cedeb817099f703aeaa335771981d0c5a9f43982b73 The OpenSSF Package Analysis project identified 'poptoken-builder-node' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in secrets-management (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2bff791886c61ea5ea5f8d294fe5883cc6e253f105fd9a0f1b6e19e22f56a751 The OpenSSF Package Analysis project identified 'secrets-management' @ 99.3.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in fe-bitmovin-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb423933317049482de1eccf90e5786861fc4d50647ce5fa521c0aeb7a164d25 The OpenSSF Package Analysis project identified 'fe-bitmovin-player' @ 99.3.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in optus-sport-ctv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7e77d4e5b4d39f3120c7742b9d7a7e79b69f2d5a5ed122b1f57add9d3564a752 The OpenSSF Package Analysis project identified 'optus-sport-ctv' @ 99.3.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1171 Malicious code in cds-banking-prd-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a80797432aad825151adf407bf1a7df167013faed787f2530a93f1736f2a0084 The OpenSSF Package Analysis project identified 'cds-banking-prd-viewer' @ 99.3.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-1170 Malicious code in amcharts-accessibility-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d8c46b66a30d5f77349bdbe5c55b3412346a1b9ee26009a3ee535cdcf1e1677 The OpenSSF Package Analysis project identified 'amcharts-accessibility-plugin' @ 99.3.0 npm as malicious. It is considered malicious because: -...

Malicious code in tchap-translations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca575a89e5cfe2c388f248f9084e97b9cc385753de105d2ada5dc6323d1de06f The OpenSSF Package Analysis project identified 'tchap-translations' @ 9.9.10 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1159 Malicious code in tchap-translations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca575a89e5cfe2c388f248f9084e97b9cc385753de105d2ada5dc6323d1de06f The OpenSSF Package Analysis project identified 'tchap-translations' @ 9.9.10 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1155 Malicious code in createarrayfrommixed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b5b05e4d5d47ae77d4f4838cadeb6514d14c7b8affae381303aefe4746ea85e3 The OpenSSF Package Analysis project identified 'createarrayfrommixed' @ 1.9.1 npm as malicious. It is considered malicious because: - The packa...

Malicious code in types-for-adobe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 927dcbc233169c84ab7ef0e97232782f6bb821d476409cc6ccc8587995dabdc8 The OpenSSF Package Analysis project identified 'types-for-adobe' @ 99.3.9 pypi as malicious. It is considered malicious because: - The package...