2444 matches found
Malicious code in ent-profile-api-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f9c39ae8dadaf1b8ac82e8e1f7b312d04c58cb2a208ba535221cae3bac7ae787 The OpenSSF Package Analysis project identified 'ent-profile-api-client' @ 9.3.1 npm as malicious. It is considered malicious because: - The...
MAL-2024-1011 Malicious code in lol-huy (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 762379a17b4068ddffc2ae82540c61d7e765f81b580f0cddfb5b895b974f1e2a The OpenSSF Package Analysis project identified 'lol-huy' @ 11230000951.0.8 npm as malicious. It is considered malicious because: - The package...
MAL-2024-1007 Malicious code in @dh-io-globalelem/footnote-component (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4022d6e9ad567de4e27943e9f7b877b7f4fc8ad0dc9e8c9dcf81738af56bc2a2 The OpenSSF Package Analysis project identified '@dh-io-globalelem/footnote-component' @ 5.990.10 npm as malicious. It is considered malicious...
MAL-2024-1000 Malicious code in custom-solutions (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 72a2a270586bc778c1c8a52b2a28ad657e33370ff5e8df12cc812823127d9a1f The OpenSSF Package Analysis project identified 'custom-solutions' @ 20.8.9 npm as malicious. It is considered malicious because: - The package...
MAL-2024-999 Malicious code in wickrserverdirectory (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f730645eb2725e8a803ead1923d965ab8417efbdfb226db5f57117a42010263b The OpenSSF Package Analysis project identified 'wickrserverdirectory' @ 6.37.8 npm as malicious. It is considered malicious because: - The...
MAL-2024-989 Malicious code in en-task-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 430b6af14481f12dfa919057a897496d1f551a6e0a10bb136d228753517161b8 The OpenSSF Package Analysis project identified 'en-task-helpers' @ 1.29.20 npm as malicious. It is considered malicious because: - The package...
MAL-2024-991 Malicious code in crumpet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 42425457cf6a4b96a2353dfbbab52426f6a871b0db230861f31e6b68513b37da The OpenSSF Package Analysis project identified 'crumpet' @ 1.0.4 npm as malicious. It is considered malicious because: - The package communicat...
MAL-2024-984 Malicious code in prism-commercial-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 022a3875aaf0406fa69c720352856a350f48f0b350caf1e5bb66717663d7a078 The OpenSSF Package Analysis project identified 'prism-commercial-ui' @ 100.100.100 npm as malicious. It is considered malicious because: - The...
MAL-2024-993 Malicious code in privdel (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis edd03ccc68c5b01bcfcb939f4794749d8c8a797d45611b86636883add7bb5b44 The OpenSSF Package Analysis project identified 'privdel' @ 1.999.0 npm as malicious. It is considered malicious because: - The package executes...
MAL-2024-975 Malicious code in @bughunter0007/packages-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7917dfb8691c19dbb896a26b03004bfa6ac280745ce23f44939f929faffbc94 The OpenSSF Package Analysis project identified '@bughunter0007/packages-analytics' @ 1.2.2 npm as malicious. It is considered malicious because...
Malicious code in @bughunter0007/packages-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d7917dfb8691c19dbb896a26b03004bfa6ac280745ce23f44939f929faffbc94 The OpenSSF Package Analysis project identified '@bughunter0007/packages-analytics' @ 1.2.2 npm as malicious. It is considered malicious because...
MAL-2024-973 Malicious code in packages-analytic (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 970fc09fccad26ac5a8eb48041b00f5f843260c7c594cd0211198e2b191f82c0 The OpenSSF Package Analysis project identified 'packages-analytic' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-972 Malicious code in internal-corp-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3988d65f66ad5458f837d634b38f70d920bb0bffc57c0f5518f3ec99db298a2f The OpenSSF Package Analysis project identified 'internal-corp-package' @ 1.5.0 npm as malicious. It is considered malicious because: - The...
Malicious code in internal-corp-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3988d65f66ad5458f837d634b38f70d920bb0bffc57c0f5518f3ec99db298a2f The OpenSSF Package Analysis project identified 'internal-corp-package' @ 1.5.0 npm as malicious. It is considered malicious because: - The...
MAL-2024-976 Malicious code in discord.js-commandv14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 126e742ca73d1c4cdf2ec98e46c96cef6f7c92d341e8c71305b73c0fcfdb69e9 The OpenSSF Package Analysis project identified 'discord.js-commandv14' @ 1.0.0 npm as malicious. It is considered malicious because: - The...
Malicious code in @ssr-frontend/packages-analytics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 17a895de36109204be95b9aba4154cc6414897889ce21aed3bfa4f0a304b3453 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-971 Malicious code in jera (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb23042fd58a78e938674a631ab67c9e3f5df50007c0ae2088da7c6da59e9805 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-970 Malicious code in discord.js-commandsv14 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0552b95113f728a401629d22107eae7aa9479e0632b876f49e2558af8784f665 The OpenSSF Package Analysis project identified 'discord.js-commandsv14' @ 1.0.4 npm as malicious. It is considered malicious because: - The...
MAL-2024-957 Malicious code in ccl-modal (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 39e730f4f56209fb93dff1d5b08b4aef3031c600f8402df5d61b00e9f19a41e0 The OpenSSF Package Analysis project identified 'ccl-modal' @ 2.3.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-947 Malicious code in moblig-npm (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a9601f46c6924bb210289c184590485d4dabf6696dc6c0da5720465002bcf06 The OpenSSF Package Analysis project identified 'moblig-npm' @ 1.0.4 npm as malicious. It is considered malicious because: - The package...