MAL-2024-9086 Malicious code in @linx-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70dd8ec71455f4177650ed33f72b8da1f8067e2afbebd634836da68f44cbc53 The OpenSSF Package Analysis project identified '@linx-ui/shared' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in @linx-ui/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70dd8ec71455f4177650ed33f72b8da1f8067e2afbebd634836da68f44cbc53 The OpenSSF Package Analysis project identified '@linx-ui/shared' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in should_be_whitelisted.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2bdcbf3b9af97d69ba20e716c6917837abe6b881080b90b816fffb03c9ea288f The OpenSSF Package Analysis project identified 'shouldbewhitelisted.js' @ 10.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9082 Malicious code in should_be_whitelisted.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2bdcbf3b9af97d69ba20e716c6917837abe6b881080b90b816fffb03c9ea288f The OpenSSF Package Analysis project identified 'shouldbewhitelisted.js' @ 10.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-9073 Malicious code in speech-to-speech-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947b44b1c26d3fdd2e1470d18b34076e52b1506fbadbdf85505632a63e4b6c9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9072 Malicious code in electron-release-clerk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62971b65e18446144c3987b2e748be1659667c56f764920e44ca8b98b516a62b The OpenSSF Package Analysis project identified 'electron-release-clerk' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-9069 Malicious code in @b2bneo/components-tabs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1d577f52f10cee6de3de2dee9eb8d3d70fb94c04b41f3dfb93794409066d6c8 The OpenSSF Package Analysis project identified '@b2bneo/components-tabs' @ 1.3.0 npm as malicious. It is considered malicious because: - The...

Malicious code in cloudflare-docs-starlight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc416353baa88972c0106ceb1b2fa7077b9cfbcd687be15e44c70ee5edc0c526 The OpenSSF Package Analysis project identified 'cloudflare-docs-starlight' @ 1.1.1 npm as malicious. It is considered malicious because: - The...

MAL-2024-9058 Malicious code in cloudflare-docs-starlight (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc416353baa88972c0106ceb1b2fa7077b9cfbcd687be15e44c70ee5edc0c526 The OpenSSF Package Analysis project identified 'cloudflare-docs-starlight' @ 1.1.1 npm as malicious. It is considered malicious because: - The...

Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

MAL-2024-9067 Malicious code in website-scanner (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bab4a414e51f614858ff935138ccb2632b0ba1801566c398a699e692715ccaae The obfuscated code in setup.py on installation collects information about the system all possible about hardware, available resources, IP, names, etc. and sen...

MAL-2024-9057 Malicious code in algoliasearch-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 855faa64da2f22ef512ead61e2ee68ababe304f51a2f9a0e0daeff0443902fa2 The OpenSSF Package Analysis project identified 'algoliasearch-v5' @ 9.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9065 Malicious code in axp-product-ducks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5285fb9646b0435fb4ae3204b5975277243e149fc95c187c5c65e2fa0609389e The OpenSSF Package Analysis project identified 'axp-product-ducks' @ 30.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9045 Malicious code in evolve-base-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 909d9bfde96cc057e1103d65d9b672ee44b67faf28bb4f4fb8fcbfd7877903d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hakka (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1baf872685dd4243ab821d1f37c342f5af09558faf5e9bc83e1fd16505802029 The OpenSSF Package Analysis project identified 'hakka' @ 2.1.2 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-9038 Malicious code in @plentyofcode/header-bidding-adslot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis af5eb7081dde9d70a0712995098c35c53b72258056714c3dbefd6a3d194d6ed3 The OpenSSF Package Analysis project identified '@plentyofcode/header-bidding-adslot' @ 2.0.36 npm as malicious. It is considered malicious...

MAL-2024-9037 Malicious code in espace-membre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5b15612a701319c442ed796295c30f8613359c1e11fad94655184bdf089bbc9c The OpenSSF Package Analysis project identified 'espace-membre' @ 0.3.3 npm as malicious. It is considered malicious because: - The package...

Malicious code in @kp-admin/history (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9291332b4f8b2a62e28230207b0b18e9e9f5e162e170870f684b14a27ea74f34 The OpenSSF Package Analysis project identified '@kp-admin/history' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9036 Malicious code in @kp-admin/history (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9291332b4f8b2a62e28230207b0b18e9e9f5e162e170870f684b14a27ea74f34 The OpenSSF Package Analysis project identified '@kp-admin/history' @ 20.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9035 Malicious code in @gintel/personal-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceacaddd98b873d32e3e6aa49bd9d48f964eca12ffe724a93abeee1ca81004db The OpenSSF Package Analysis project identified '@gintel/personal-assistant' @ 0.180.0 npm as malicious. It is considered malicious because: - T...