Malicious code in myvaroniswebapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95a8c770161229d39bc64eb95c2d17829d937cc25c14b9472e2e5c87ffb69b00 The OpenSSF Package Analysis project identified 'myvaroniswebapp' @ 200.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in azure-rest-api-specs-eng-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 34ba9e800ce9823b7e1b4b90d47a87eafdfb783d616caa8a69bf93f55ee0a9b5 The OpenSSF Package Analysis project identified 'azure-rest-api-specs-eng-tools' @ 1.0.1 npm as malicious. It is considered malicious because: -...

MAL-2024-1662 Malicious code in kami-richtext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9634fe3bee06c80f43ca27ad558c4834386dc1bb31779583c7911b679f550bff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1661 Malicious code in govgen-governance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3df1a5ba7e5302cde15d6c6ab8220b80b3dd7d291cbdab4f06cac278dacf77de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1660 Malicious code in @amops/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9eb323a3c294832e925d2ed472560ab37507fc32711add225d99db97b08bc74 The OpenSSF Package Analysis project identified '@amops/fetch' @ 1.4.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1650 Malicious code in trip-component-platform-online-region-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 007878676d8487bbeba763b564d225daf11ed353d8624a1aa8e52264efe40497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1647 Malicious code in tyk-developer-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6830a4dad414db435db7f758c7ca9a035d4571a5f4e1053c017e1ee603629e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storefront-h5-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bdecd59d5667e506fd4f66d29c575454020e37384211ce8a27e463cd6971298 The OpenSSF Package Analysis project identified 'storefront-h5-sdk' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1642 Malicious code in test-package-random-name-for-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1f87eff60d8591d10e2be79afe5011ea9f63f823c7a014281e4e21f0da76eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in draconianspeed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b1212e40bb57fce7672f50431153645b13624cc1e2061b44c0b91fec275e7853 The OpenSSF Package Analysis project identified 'draconianspeed' @ 5.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1630 Malicious code in mvp-website-html (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 89574af4bb00d4c540ffc8651f5ef4bcc0f72af2368ee6e32346807e91d2e8a0 The OpenSSF Package Analysis project identified 'mvp-website-html' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in rb-accordion (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 435bf9e58c9f11fe55f80f865ec1f291beee55aaaf1ff78d0235dbf93b35202f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in delta0231 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7df399fa1580fb8e64d7cd2481b0212f607aa8146a1b904b83a7af05ebb8031b The OpenSSF Package Analysis project identified 'delta0231' @ 100.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1619 Malicious code in dc-test1-asdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04026ef40e4abce9afd70341d1bbb7d8907a917e7a6bd0fd6b7ffb15623a30c0 The OpenSSF Package Analysis project identified 'dc-test1-asdf' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in dc-test1-asdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04026ef40e4abce9afd70341d1bbb7d8907a917e7a6bd0fd6b7ffb15623a30c0 The OpenSSF Package Analysis project identified 'dc-test1-asdf' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1624 Malicious code in importlib-metadate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b6db8994d6a78a5d0d95df2d0add2257ee6188f8c5419cbd7e2813426739d15d --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: baidu-readver Reasons based on the campaign: - The package...

MAL-2024-1611 Malicious code in employee-schedule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71b36d3a13dcd71ba835e490919b150ec8fbc7de88517906ec7aecaaf89dcbab The OpenSSF Package Analysis project identified 'employee-schedule' @ 99.9.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in employee-schedule (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71b36d3a13dcd71ba835e490919b150ec8fbc7de88517906ec7aecaaf89dcbab The OpenSSF Package Analysis project identified 'employee-schedule' @ 99.9.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1616 Malicious code in colors-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 77b77addbd8ed20785c5387408e4748eea849b1a038f08b1fb90a7825fe530a8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1588 Malicious code in leocare-new (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 311899bcdd83d3cd308268641290fc8fd0f503d308fc1bbf7488b5f0fab734cb The OpenSSF Package Analysis project identified 'leocare-new' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...