MAL-2024-96 Malicious code in wdpr-node-http-error-handler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afec8bd883f6042f7047f6b0d29cd37d57ef2e6f179a717a0ee7bbf44a16fe8 The OpenSSF Package Analysis project identified 'wdpr-node-http-error-handler' @ 16.1.1 npm as malicious. It is considered malicious because: -...

MAL-2024-95 Malicious code in wdpr-node-conversation (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13bac8c43485c160298a14b6d17e48f8a18cf34bf9b2f1c73b77cc45a82b577b The OpenSSF Package Analysis project identified 'wdpr-node-conversation' @ 2.3.3 npm as malicious. It is considered malicious because: - The...

Malicious code in wdpr-node-cdn (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2c2f25a3f7cd69d4500c298b6a66498423b248384970031de6dc2fd42221ecd The OpenSSF Package Analysis project identified 'wdpr-node-cdn' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-100 Malicious code in wdpr-ra-node-csp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f84a83ea13684761bce489c49b762047ea5f7cb2d68aa8e38f64842cbf224840 The OpenSSF Package Analysis project identified 'wdpr-ra-node-csp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in synology-cft (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ce8d0a13d9faee23cc5fc3a8ad9842e1ac0678ba3fd10d0bd453006cb82a88a7 The OpenSSF Package Analysis project identified 'synology-cft' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-89 Malicious code in heatwallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04a592accda6e728f314fbe238a01ef38f20a2f7a1e0a09aa4099bd79a8650d7 The OpenSSF Package Analysis project identified 'heatwallet' @ 10.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-88 Malicious code in pecko (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b4f977d84345ded72bac3adc44f78bfc69c9393bf8223ddff83c73b01673ca2 The OpenSSF Package Analysis project identified 'pecko' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-86 Malicious code in shoponline.epiroc.com (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af86d9c1fc83f25835c1b437a93a6a278c5bcb1cfd811a0892fc93af187d0a4 The OpenSSF Package Analysis project identified 'shoponline.epiroc.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Malicious code in test-devoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94d087127b055251bef2c40e4c884c82c7f4e39f4631fa5995116fb9b1d65f4f The OpenSSF Package Analysis project identified 'test-devoxx' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2024-55 Malicious code in internal-test-devoxx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fb92a072265a550a5ce1cc1d16f096b636845bc8edabaf60bddfebad43c423bd The OpenSSF Package Analysis project identified 'internal-test-devoxx' @ 0.0.4 npm as malicious. It is considered malicious because: - The packa...

Malicious code in sourcify-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9df2af027b2402dd66d002eec5cfbf3b37918861883becfce5f43127483c9be The OpenSSF Package Analysis project identified 'sourcify-ui' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in onetake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52bec93f09b5dc6085214609ef35d8aaf2346d6e50e6a12e5304e16aa3493ae2 The OpenSSF Package Analysis project identified 'onetake' @ 1.1.30 npm as malicious. It is considered malicious because: - The package...

MAL-2024-52 Malicious code in onetake (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52bec93f09b5dc6085214609ef35d8aaf2346d6e50e6a12e5304e16aa3493ae2 The OpenSSF Package Analysis project identified 'onetake' @ 1.1.30 npm as malicious. It is considered malicious because: - The package...

Malicious code in demo-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7ee37cdc93b14e892899627c645c7fd80fcc18ea968522ffa87ed65ddcb5061b The OpenSSF Package Analysis project identified 'demo-store' @ 4.99.99 npm as malicious. It is considered malicious because: - The package...

MAL-2024-50 Malicious code in optimistic-cart-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0518690394723fc9bf03f60d8192f09e4133e8398d94ec7b04d2fa9ac26796be The OpenSSF Package Analysis project identified 'optimistic-cart-ui' @ 0.99.99 npm as malicious. It is considered malicious because: - The packa...

Malicious code in essentialist-gallery-block-cgb-guten-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a62a19808d12d60a5872aad70b9aced63cd5ec9661be965069f337e0107f8004 The OpenSSF Package Analysis project identified 'essentialist-gallery-block-cgb-guten-block' @ 1.0.0 npm as malicious. It is considered maliciou...

MAL-2024-48 Malicious code in essentialist-gallery-block-cgb-guten-block (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a62a19808d12d60a5872aad70b9aced63cd5ec9661be965069f337e0107f8004 The OpenSSF Package Analysis project identified 'essentialist-gallery-block-cgb-guten-block' @ 1.0.0 npm as malicious. It is considered maliciou...

MAL-2024-64 Malicious code in j5-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis eac2e249ebbccb3255a8760bd35b3e6fd100192fe0801b54e53231a71a0789a1 The OpenSSF Package Analysis project identified 'j5-test' @ 1.0.1 npm as malicious. It is considered malicious because: - The package executes o...

MAL-2024-61 Malicious code in akshansh-jaiswal-ctf-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1a21cd8cd0f3e40599808c19641304a3f52f263a31d9b68e9847bc4c6933cc80 The OpenSSF Package Analysis project identified 'akshansh-jaiswal-ctf-security' @ 99.9999.9999 npm as malicious. It is considered malicious...

Malicious code in error-can-not-resolve-resource (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f44848c297338de1e97a9c4d961ba8f2441f2464713bd36229bf5c0fb7509455 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...