2444 matches found
MAL-2024-7438 Malicious code in eslint-plugin-ally-rules (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 23310826a7310567370020e364d6dedeb87558d2ce0ffcf5bc6054d70951bf3c The OpenSSF Package Analysis project identified 'eslint-plugin-ally-rules' @ 1.0.5 npm as malicious. It is considered malicious because: - The...
MAL-2024-7424 Malicious code in fake-package-agpl-license (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 53470e96107ebc806b1a440821244a335389aca112b5752ce995ae87150b0b4d The OpenSSF Package Analysis project identified 'fake-package-agpl-license' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-7425 Malicious code in fake-package-apache-with-copyleft-dep (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis dccffa1d5f84a8476d98fd5eed5c0401aba753ef0916b506d1b8f9687029351d The OpenSSF Package Analysis project identified 'fake-package-apache-with-copyleft-dep' @ 4.0.0 npm as malicious. It is considered malicious...
MAL-2024-7422 Malicious code in genaiscript-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis bb751d77363fdcebae7c4876de9a26b85a29be3677d2de516fb1c4e9cfd244c1 The OpenSSF Package Analysis project identified 'genaiscript-core' @ 0.4.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in @fake-registry/a (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 97c876bbfb1684701b8dc4481892093cd4c86a3dc718debe40811786e4175f57 The OpenSSF Package Analysis project identified '@fake-registry/a' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in react-devtools-fusebox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 023ce7599294ef47cf0b24d7424bada9cfa75c0c3ac1f94d0a2a23e0e4f55d6b The OpenSSF Package Analysis project identified 'react-devtools-fusebox' @ 2.1.1 npm as malicious. It is considered malicious because: - The...
MAL-2024-7415 Malicious code in compiler-wasm-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2c3e3404f77486c9124e70890333cce19382125d07dac40b2ed4b87a466c855e The OpenSSF Package Analysis project identified 'compiler-wasm-lib' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in react-release-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef588daeba2a0ed635c0f3dce7387b25c88ecca3e924b5d01048b11e1e6def2a The OpenSSF Package Analysis project identified 'react-release-script' @ 1.9.9 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-7098 Malicious code in react-release-script (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ef588daeba2a0ed635c0f3dce7387b25c88ecca3e924b5d01048b11e1e6def2a The OpenSSF Package Analysis project identified 'react-release-script' @ 1.9.9 npm as malicious. It is considered malicious because: - The packa...
MAL-2024-7092 Malicious code in addcriteria (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8a650259b91088a362b09e041392896460946359bcf0b040ffed50c24de11a2 The OpenSSF Package Analysis project identified 'addcriteria' @ 69.69.69 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7091 Malicious code in parser-7.0.0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 99ace32a9b913ac4a00ad574ac934c4eb6274d7c0cf3b948ced6b8191f511b68 The OpenSSF Package Analysis project identified 'parser-7.0.0' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in parser-7.0.0 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 99ace32a9b913ac4a00ad574ac934c4eb6274d7c0cf3b948ced6b8191f511b68 The OpenSSF Package Analysis project identified 'parser-7.0.0' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7090 Malicious code in cli-pkg-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a7aae8c7f3c482a70cb9cd90ee7c66cdab49f87aea5f39075c02aef180ad54a The OpenSSF Package Analysis project identified 'cli-pkg-test' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in prpc-client-instance.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 890706b9c002912e24d6ea56d82d7736b12c82d91cc8dc4e7a2bc97e4c1d6d9e The OpenSSF Package Analysis project identified 'prpc-client-instance.js' @ 69.69.69 npm as malicious. It is considered malicious because: - The...
MAL-2024-7061 Malicious code in prpc-client-instance.js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 890706b9c002912e24d6ea56d82d7736b12c82d91cc8dc4e7a2bc97e4c1d6d9e The OpenSSF Package Analysis project identified 'prpc-client-instance.js' @ 69.69.69 npm as malicious. It is considered malicious because: - The...
Malicious code in blue-oval-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c708f4696b33e43ba9ca5b70bafa9ac82b1ee694df0caa84f7283885ff8d5544 The OpenSSF Package Analysis project identified 'blue-oval-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7060 Malicious code in blue-oval-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c708f4696b33e43ba9ca5b70bafa9ac82b1ee694df0caa84f7283885ff8d5544 The OpenSSF Package Analysis project identified 'blue-oval-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in kiln-desktop (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced7fe4f98a9d76766dce93b281c2cb0bbefc77a4698e0cfe9a74686ddb1013a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @wdp-gov/catalog-serialization-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fff02ca904ee412fdcab9847e7f29ea41e117e4248526d1712ff730ce59acb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...