MAL-2023-8653 Malicious code in astar-ci-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a6a993eb0841db0ddd08de25ab3fc6aacace2d394a40bf1cece2476b76549b1e The OpenSSF Package Analysis project identified 'astar-ci-scripts' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8649 Malicious code in npm_package_dependencies__babel_runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0133dc23a8ea80f30cc82ea0c0d6059356ea0ea6f50a4f9156fba21e35c7293 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbabelruntime' @ 7.23.2 npm as malicious. It is considered malicious...

MAL-2023-8647 Malicious code in npm_package_dependencies_base_64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 57186be5c8cb34ac2917add3d88f89585c606a2b3cf4628030694c46c5f5ba27 The OpenSSF Package Analysis project identified 'npmpackagedependenciesbase64' @ 2.0.0 npm as malicious. It is considered malicious because: - T...

MAL-2023-8648 Malicious code in npm_package_devdependencies__types_jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5f8a28159fb1b2ef33b43e4aa71b0c85879d6220009091751cfa1590a1900329 The OpenSSF Package Analysis project identified 'npmpackagedevdependenciestypesjest' @ 30.5.0 npm as malicious. It is considered malicious...

MAL-2023-8639 Malicious code in yetibarbar_plug (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c26573e1e915f00ad980599539d1a9a04737c0264c7a7366cf0b7a88a92df08 The OpenSSF Package Analysis project identified 'yetibarbarplug' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8636 Malicious code in @terraform-aws-github-runner/aws-ssm-uti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9e8dee05678c6b03df102e495749bdc9db8ae73a32752a0f85345cc637577012 The OpenSSF Package Analysis project identified '@terraform-aws-github-runner/aws-ssm-uti' @ 1.999.0 npm as malicious. It is considered maliciou...

Malicious code in topcoderhomepage_3.0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a918cae24042a2081d6c6149a7791e973357063dd7292f59ac3d9b32d9561974 The OpenSSF Package Analysis project identified 'topcoderhomepage3.0' @ 1.0.2 npm as malicious. It is considered malicious because: - The packag...

MAL-2023-8619 Malicious code in oddsfire-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d6560345fe7b94e452865d383a96b49b27e71c7113505ddfd5306218da9648d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8607 Malicious code in configcat-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa83f7f79893be6fd5e1387e5464a8111c68512b8744756b77814e43a5679c8c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in primarycare (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f127bd23e5c409b4d729767fb6df0fade7da73e67b9bf12303c53330c7970280 The OpenSSF Package Analysis project identified 'primarycare' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8555 Malicious code in otnet-ory-network-tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19a9ebfed32ec491b007a6c7e65f8ebae68d0acc3175b56442fa67e25fc916fe Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ifl-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d842c50e1aff05fb5874d61c1f60e5a803cc51a39cda09deb405e5c6935bce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8535 Malicious code in frontend-components-react-transpiled (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 463e9359f450d451e47eef2a46a82e6d6fe266ffa312c37239b9e2fda0a440fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discomusic (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d5ae86bb92ecda0b9d67bf6bcb933e00f57e91de9916d1b3a3ad5a68993c0778 The OpenSSF Package Analysis project identified 'discomusic' @ 0.0.3 pypi as malicious. It is considered malicious because: - The package...

MAL-2023-8527 Malicious code in jerrytestjerry (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis afcd6612db745033b56fd846df2a95e2611a705900675bdd152150c2518fc2ed The OpenSSF Package Analysis project identified 'jerrytestjerry' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-8526 Malicious code in carvana (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 954bdf3d35f93afe84019ba5192564e1e4538bac34eafa80b8b581db0a7c8d86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8521 Malicious code in bds-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb86d6e10a764d9de055f1e941aaabd3c07c262bd4182f27d8258212ed8c0169 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8514 Malicious code in frontend-style-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2950942ff85300d3cee0a0eed9f373eaaa043ef93e942089421c5a5586e209e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8515 Malicious code in discord-web-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79f33d84f92d16d56339b7efbd2ce2488e85ae2c177d33022e28026c4d74793e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ifl-tokens (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32da3cff60acce4a954d540581c8ec4d603e8375fcb3043506346a4929bf9c7f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...