MAL-2024-7793 Malicious code in appds-nodejs-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac973f28037939ed23e341eacd9fcc006c3709075045f2d51232131c111977 The OpenSSF Package Analysis project identified 'appds-nodejs-utils' @ 0.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7837 Malicious code in tyibyc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 786311540d56cd996efe5220ccf60e906bf9ba3659372a080971ecf9b2e858dc The OpenSSF Package Analysis project identified 'tyibyc' @ 1.5.31 npm as malicious. It is considered malicious because: - The package executes o...

MAL-2024-7783 Malicious code in chromestatus-openapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3f0ae839e77574e6fbdeb08227dfe2e2d3be958d34456a8cc4df440988db1e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7782 Malicious code in google-map-markerclusterer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7d6f6cce68b78a64c491ce96d722b6ae80bb91893fd7933538540e99bd4e30a9 The OpenSSF Package Analysis project identified 'google-map-markerclusterer' @ 1.2.8 npm as malicious. It is considered malicious because: - The...

MAL-2024-7781 Malicious code in angular-material-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cc6ec3d00f5ac0565644d0b1fce06bf68473a14b48df88761451345f12c7475c The OpenSSF Package Analysis project identified 'angular-material-panel' @ 1.1.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-7779 Malicious code in shadycss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 63b72ee48be67972ecef0ef8abb174f91a248b159d505d0cfc49975e6261dc01 The OpenSSF Package Analysis project identified 'shadycss' @ 1.0.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7840 Malicious code in testjsonn2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d75d52ae07c9c9e2e6b773f2806c66631dd764da793bac0559e65bc4d0e7f66 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in testjson3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 783bce620b6d82880784734f95e5e48217bdc056277d57781a45fb14b66bcb97 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in testjsonn1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d8b57f71eadeb645df871ae41a475cb9a8ba647679e7455f66e0c9e9b5627651 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-ronnyfredd-exfiltr-clipboard Reasons based on the...

Malicious code in fe-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f10193d263c551e806779906e66b796c66043d73893719ea555b3c822b27adc4 The OpenSSF Package Analysis project identified 'fe-bootstrap' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7771 Malicious code in express-jwt-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe7d6a9d5298553234316cd7fd21bd7ac74d55c02a1e156505dd54dc8944e648 The OpenSSF Package Analysis project identified 'express-jwt-v6' @ 6.0.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7767 Malicious code in @playsistemico/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 630104848acd582d628c24e45dc9472952d21452b641115bb0d9fd3eabb2a5dc The OpenSSF Package Analysis project identified '@playsistemico/core' @ 11.33.70 npm as malicious. It is considered malicious because: - The...

Malicious code in globalstyling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee2731f771d38fb75a623ac5b3107d1b89202dab21cfa974698f5382567510e6 The OpenSSF Package Analysis project identified 'globalstyling' @ 100.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7762 Malicious code in globalstyling (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ee2731f771d38fb75a623ac5b3107d1b89202dab21cfa974698f5382567510e6 The OpenSSF Package Analysis project identified 'globalstyling' @ 100.69.69 npm as malicious. It is considered malicious because: - The package...

Malicious code in pleasedontcall (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d5d1162310e60091c8762dabc38ba9a5eee768bd35759649e12b866d40f6582d The OpenSSF Package Analysis project identified 'pleasedontcall' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7746 Malicious code in inline-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9b4dc3b900cda7b3ddba48442ae448f1af310a11854f024134f391baafb62d8 The OpenSSF Package Analysis project identified 'inline-icons' @ 70.69.69 npm as malicious. It is considered malicious because: - The package...

Malicious code in jquery-ui-dialog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f1ac81ca06088c1af7f942bcd5c3e05a81ee19ded09f4417b8eea369da63f3c3 The OpenSSF Package Analysis project identified 'jquery-ui-dialog' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7741 Malicious code in pewspwnrepo2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11001ebb95c4c041a670d6ce81a5106bc97c943d9a1b5c7f7fe68b2e963b0ee4 The OpenSSF Package Analysis project identified 'pewspwnrepo2' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7737 Malicious code in lykooss_poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ba3a00276cdb801eafba21620fd8bb30298090ac3c341a63455934994d7c6bb The OpenSSF Package Analysis project identified 'lykoosspoc' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7738 Malicious code in lykoss_poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 12c9b6b380ba43128b29b663fbcd6e7da2b0311994f94c228fcf282b937c6268 The OpenSSF Package Analysis project identified 'lykosspoc' @ 8.0.0 npm as malicious. It is considered malicious because: - The package...