MAL-2024-7092 Malicious code in addcriteria (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8a650259b91088a362b09e041392896460946359bcf0b040ffed50c24de11a2 The OpenSSF Package Analysis project identified 'addcriteria' @ 69.69.69 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7091 Malicious code in parser-7.0.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 99ace32a9b913ac4a00ad574ac934c4eb6274d7c0cf3b948ced6b8191f511b68 The OpenSSF Package Analysis project identified 'parser-7.0.0' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in parser-7.0.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 99ace32a9b913ac4a00ad574ac934c4eb6274d7c0cf3b948ced6b8191f511b68 The OpenSSF Package Analysis project identified 'parser-7.0.0' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7090 Malicious code in cli-pkg-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a7aae8c7f3c482a70cb9cd90ee7c66cdab49f87aea5f39075c02aef180ad54a The OpenSSF Package Analysis project identified 'cli-pkg-test' @ 4.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in prpc-client-instance.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 890706b9c002912e24d6ea56d82d7736b12c82d91cc8dc4e7a2bc97e4c1d6d9e The OpenSSF Package Analysis project identified 'prpc-client-instance.js' @ 69.69.69 npm as malicious. It is considered malicious because: - The...

MAL-2024-7061 Malicious code in prpc-client-instance.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 890706b9c002912e24d6ea56d82d7736b12c82d91cc8dc4e7a2bc97e4c1d6d9e The OpenSSF Package Analysis project identified 'prpc-client-instance.js' @ 69.69.69 npm as malicious. It is considered malicious because: - The...

Malicious code in blue-oval-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c708f4696b33e43ba9ca5b70bafa9ac82b1ee694df0caa84f7283885ff8d5544 The OpenSSF Package Analysis project identified 'blue-oval-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7060 Malicious code in blue-oval-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c708f4696b33e43ba9ca5b70bafa9ac82b1ee694df0caa84f7283885ff8d5544 The OpenSSF Package Analysis project identified 'blue-oval-theme' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in kiln-desktop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ced7fe4f98a9d76766dce93b281c2cb0bbefc77a4698e0cfe9a74686ddb1013a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @wdp-gov/catalog-serialization-engine (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fff02ca904ee412fdcab9847e7f29ea41e117e4248526d1712ff730ce59acb6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-5448 Malicious code in packagescrape (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in myvaroniswebapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 95a8c770161229d39bc64eb95c2d17829d937cc25c14b9472e2e5c87ffb69b00 The OpenSSF Package Analysis project identified 'myvaroniswebapp' @ 200.0.2 npm as malicious. It is considered malicious because: - The package...

Malicious code in azure-rest-api-specs-eng-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 34ba9e800ce9823b7e1b4b90d47a87eafdfb783d616caa8a69bf93f55ee0a9b5 The OpenSSF Package Analysis project identified 'azure-rest-api-specs-eng-tools' @ 1.0.1 npm as malicious. It is considered malicious because: -...

MAL-2024-1662 Malicious code in kami-richtext (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9634fe3bee06c80f43ca27ad558c4834386dc1bb31779583c7911b679f550bff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1661 Malicious code in govgen-governance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3df1a5ba7e5302cde15d6c6ab8220b80b3dd7d291cbdab4f06cac278dacf77de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1660 Malicious code in @amops/fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d9eb323a3c294832e925d2ed472560ab37507fc32711add225d99db97b08bc74 The OpenSSF Package Analysis project identified '@amops/fetch' @ 1.4.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1650 Malicious code in trip-component-platform-online-region-selector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 007878676d8487bbeba763b564d225daf11ed353d8624a1aa8e52264efe40497 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1647 Malicious code in tyk-developer-portal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6830a4dad414db435db7f758c7ca9a035d4571a5f4e1053c017e1ee603629e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in storefront-h5-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3bdecd59d5667e506fd4f66d29c575454020e37384211ce8a27e463cd6971298 The OpenSSF Package Analysis project identified 'storefront-h5-sdk' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1642 Malicious code in test-package-random-name-for-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b1f87eff60d8591d10e2be79afe5011ea9f63f823c7a014281e4e21f0da76eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...