MAL-2024-8046 Malicious code in artifact-lab-3-package-89883da3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc3109f451995d11f0f2e99d58397d06ac2bb036df5ceb90425befb54ea10f14 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8023 Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0239eb42a339ea04c20285cf4f4fd719e841f19d6e59a2cbb78f6e982fcea446 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8051 Malicious code in artifact-lab-3-package-3eef6c2c (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2325acb67ca59e847fd003a5449350d2b0b12620ed80cb82cc6189f091bdacc7 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8011 Malicious code in postman-open-technologies-knowledge-base-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1159812781f3847a9da7e6b4455cd3f3ee8bd00da0eddbe589dd52d1d56e8 The OpenSSF Package Analysis project identified 'postman-open-technologies-knowledge-base-api' @ 1.2.3 npm as malicious. It is considered...

Malicious code in internal-corp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d9c3e7fab15abf1f202460c879135f1efc55a89e056e8cbf04055a4c77af39 The OpenSSF Package Analysis project identified 'internal-corp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-8010 Malicious code in internal-corp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 40d9c3e7fab15abf1f202460c879135f1efc55a89e056e8cbf04055a4c77af39 The OpenSSF Package Analysis project identified 'internal-corp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7906 Malicious code in @adidas-data-mesh/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7900 Malicious code in @taxify/trippricing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ea65d71551b4d01fb99a1bfe5236b0d5c80c0b566ae60d044b71857883f17b21 The OpenSSF Package Analysis project identified '@taxify/trippricing' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7898 Malicious code in @taxify/eslint-config-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5cff605dafce45695b36c5a3ca744b5187bab414e45e390d8e4ac966f6088573 The OpenSSF Package Analysis project identified '@taxify/eslint-config-react-native' @ 9.999.0 npm as malicious. It is considered malicious...

MAL-2024-7899 Malicious code in @taxify/smartpickups (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9d20e7ecf4639b1082be1a46fec756d84cc7d8fc35310af0e6af87e19879fcf7 The OpenSSF Package Analysis project identified '@taxify/smartpickups' @ 9.999.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7895 Malicious code in lit-3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 58fa9943fe7f3a2ad80c2d7ec817ab05718838e0aef345b7d44416f0f525cdc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7896 Malicious code in nvmfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 147e71ec4a806f079f678e7df61fa161680442319b62f425a34e7e8bd87b1e85 The OpenSSF Package Analysis project identified 'nvmfix' @ 1.0.3 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7873 Malicious code in md-progress-circular (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8452da64b993f8adad40197107a47602421aecb7bc71f7b4fae5560a8429552e The OpenSSF Package Analysis project identified 'md-progress-circular' @ 100000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2024-7870 Malicious code in persona-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32b489c0a0bbd44ab1697c3d0492595441e65b30a71a26af76a7dce54fb3d706 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kekepaketti-git (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe3fe591280b7e540d3769aca60a5a18013d4081d1fc8006f5416636354c0097 The OpenSSF Package Analysis project identified 'kekepaketti-git' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7882 Malicious code in miapimanager-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1401d4d9e906af349022a130fd98dff7fd5a66545792c1f31587312907431e6 The OpenSSF Package Analysis project identified 'miapimanager-fe' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in eslint-plugin-mui-custom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70d526b69d55f13e3169df11ecad0ae21265a4976b0118e1bf14fe0a63f60b36 The OpenSSF Package Analysis project identified 'eslint-plugin-mui-custom' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

Malicious code in wix-smarts-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 84e76a9b6116099c21d8ddfc842416facd8c4f184bcc94730e519e32c6f9c34e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7832 Malicious code in zapier-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 98a72694a59e2b2fa9040cc6e3b823a0e1dabe2ebd53ea16ebd7afbfb8306e01 The OpenSSF Package Analysis project identified 'zapier-elements' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7831 Malicious code in byted-cg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 90e251b9f3c49de738ecec6d31759290c20383f748735d901d797110fd1b6fb2 The OpenSSF Package Analysis project identified 'byted-cg' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...